Displaying items by tag: Duo Security

Identity services provider Okta took two months to reveal a breach at a third-party provider and waited until the data that leaked out was exposed by a group of attackers known as Lapsus$.

The chief security officer of the identity services firm Okta has issued an updated statement about the claims of a breach of the company, saying there has been no breach and everything is fully operational.

Security issues with the ASUS Live Update utility, which is claimed to have been used in a supply chain attack by a nation-state, were highlighted as far back as 2016, with a security analysis of OEM updaters by three researchers from the firm Duo Security slamming the Taiwan-based firm over its lax approach to updating.