okta

ChainCatcher news, identity and access management software provider Okta officially stated that on October 30, 2024, an internal vulnerability was discovered in the AD/LDAP DelAuth when generating cached keys. The Bcrypt algorithm is used to generate cached keys, where we hash the combination string of userId + username + password. Under specific conditions, this can allow users to authenticate simply by providing a previously successfully authenticated stored cached key to the username.The prerequisite for this vulnerability is that the username must be equal to or exceed 52 characters each time a cached key is generated for the user. The affected products and versions are Okta AD/LDAP DelAuth as of July 23, 2024, and this vulnerability has been resolved in Okta's production environment on October 30, 2024.

ChainCatcher message, Gaurav_IO, the Chief Technology Officer of io.net, posted on Twitter that the third-party authentication provider Okta's Auth0 process on the worker nodes encountered issues, resulting in io.net hitting the rate limit on the Okta side.This may affect the connectivity of some devices when accessing the API, potentially leading to connection failures with the backend servers.Although this does not directly threaten the worker nodes or backend servers, it may impact the normal operation of the worker nodes.io.net is actively working with Okta to resolve the issue and is taking steps to prevent similar incidents in the future.

ChainCatcher news, Ahmad Shadid, co-founder and CEO of io.net, stated that a security incident involving unauthorized access to the metadata API recently occurred, affecting the metadata displayed on the user front end. Although GPU access permissions were not leaked, sensitive user or device data was not exposed.In light of this incident, io.net has expedited the deployment of user-level authentication integration with OKTA, which will be completed within the next 6 hours.Additionally, io.net has launched Auth0 Token for user authentication to prevent unauthorized metadata changes. During the database recovery period, users will temporarily be unable to log in. All uptime records remain unaffected, and this will not impact the vendor's computing rewards.

ChainCatcher news, according to a report by Reuters, identity management company Okta (OKTA.O) stated on Tuesday that hackers stole information from all users of its customer support system in a cyber breach that occurred two months ago. The company has notified customers and has determined that the hackers downloaded a report containing data such as the names and email addresses of all customers using its customer support system.Okta stated: "While we do not have direct knowledge or evidence that this information is being actively used, we have notified all customers that this file increases the security risks of phishing and social engineering."

ChainCatcher news, Worldcoin, the cryptocurrency company founded by OpenAI CEO Sam Altman, has integrated with German identity and access management software provider Okta and launched its identity protocol World ID.The authentication feature of World ID will go live in Germany, allowing users to undergo comprehensive verification using custom-designed hardware that employs biometric data, named Orbs, which will start being sold nationwide from Berlin.Okta's Auth0 marketplace now offers a login option using Worldcoin for authentication solutions, enabling developers to use it as a login option for their applications. (CoinDesk)