American identity and access management behemoth Okta disclosed that hacking attack targeted its private GitHub repositories.
As soon as Okta became aware of the potentially suspicious access, the company suspended all GitHub integrations with third-party applications and immediately imposed temporary access limits on its GitHub repositories.
When GitHub spotted unusual access to Okta's code repositories earlier this month, the firm became aware of a security vulnerability.
The business declared that it had taken action to stop threat actors from accessing corporate or client environments using the stolen code.
Source: https://securityaffairs.com/139881/data-breach/okta-source-code-stolen.html
"id": "OKT1916151023",
"linkid": "Okta",
"type": "Data Leak",
"date": "12/2022",
"severity": "85",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"