This episode is brought to you by the Cloud Wars Expo. This in-person event will be held June 28th to 30th at the Moscone Center in San Francisco, California.
00:15 — Another breach of identification notification is going out from Okta, an identity provider offering a SaaS service. The company has fallen victim to the Lapsus group.
00:46 — Lapsus posted eight photos showing internal systems and communications breached from Okta, putting Okta and other organizations on high alert.
01:01 — This breach emphasizes not only the concern for SaaS security but also supply chain security, as it was part of this incident.
01:17 — Organizations using SaaS providers need to be concerned with both the internal practices and processes of the provider and any subprocessors in their supply chain.