Identity management provider Okta revealed that a recent data breach affected 134 of its customers, with unauthorized access to its systems occurring between September 28 and October 17, 2023. The intruder accessed session tokens enabling them to hijack the sessions of five customers. The breach was traced to a compromise of an Okta employee’s personal Google account. Since then, Okta has revoked the stolen session tokens and disabled the compromised service account. It has also blocked the use of personal Google profiles within its enterprise.
Nissan’s operations in New Zealand and Australia have been targeted by hackers. The extent of the cyberattack and the potential compromise of customer data is