Episode 13 – Blasts from the past: Okta, Solarwinds, and Sony, again

Okta Breach

• https://www.bleepingcomputer.com/news/security/okta-says-its-support-system-was-breached-using-stolen-credentials/?s=09
• https://blog.1password.com/okta-incident/
• https://x.com/mattjay/status/1716870499458822418?s=20
• https://www.wired.com/story/okta-support-system-breach-disclosure/
• https://github.com/cloudflare/har-sanitizer

Lazarus luring employees with trojanized coding challenges: The case of a Spanish aerospace company

• https://www.welivesecurity.com/en/eset-research/lazarus-luring-employees-trojanized-coding-challenges-case-spanish-aerospace-company/

Ransomware group claims it's "compromised all of Sony systems”

• https://www.malwarebytes.com/blog/news/2023/09/ransomware-group-claims-its-compromised-[…]orporations-demand-hardcore-workers-and-gptvision-examples
• https://www.bleepingcomputer.com/news/security/sony-confirms-data-breach-impacting-thousands-in-the-us/

MGM Resorts says ransomware attack cost $100 million

• https://www.bleepingcomputer.com/news/security/mgm-resorts-ransomware-attack-led-to-100-million-loss-data-theft/

Stealing cars with relay attacks

• https://www.tiktok.com/t/ZT8rGRNch/
• https://leasing.com/guides/relay-car-theft-what-is-it-and-how-can-you-avoid-it

HTTP/2 Rapid Reset

https://www.wired.com/story/http-2-rapid-reset-flaw/

SEC SolarWinds

• https://www.sec.gov/files/litigation/complaints/2023/comp-pr2023-227.pdf
• https://www.axios.com/2023/10/30/sec-solarwinds-cyber-fraud-complaint
• https://www.reuters.com/legal/us-sues-solarwinds-court-records-2023-10-30/
• https://twitter.com/mattjay/status/1719123314126242194