3 stories tagged okta, newest first.
348 points by ramimac | 135 comments
Blog post by Joshua Rogers describing security issues he reported in Okta's auth0/nextjs-auth0 library, including an OAuth parameter injection, and the AI-slop handling of his fix.
359 points by n0rdy | 150 comments
Blog post analyzing the Okta Bcrypt cache-key security incident and drawing lessons for designing safer APIs.
592 points by nomaxx117 | 292 comments
Cloudflare blog post by Matthew Prince and colleagues describing a threat actor detected on its systems on Thanksgiving Day 2023 and the company's response.