From the Trenches: How BeyondTrust Detected a Breach at Okta and Lessons we Keep Learning from This Story

4/29/2025 12:00:00 PM [(UTC-05:00) Eastern Time (US & Canada)] - Can't make the live event? Register anyway to receive a link to the recording.

Show/Hide All Time Zones

All Time Zones

Dateline Standard Time-(UTC-12:00) International Date Line West 4/29/2025 4:00:00 AM
UTC-11-(UTC-11:00) Coordinated Universal Time-11 4/29/2025 5:00:00 AM
Aleutian Standard Time-(UTC-10:00) Aleutian Islands 4/29/2025 7:00:00 AM
Hawaiian Standard Time-(UTC-10:00) Hawaii 4/29/2025 6:00:00 AM
Marquesas Standard Time-(UTC-09:30) Marquesas Islands 4/29/2025 6:30:00 AM
Alaskan Standard Time-(UTC-09:00) Alaska 4/29/2025 8:00:00 AM
UTC-09-(UTC-09:00) Coordinated Universal Time-09 4/29/2025 7:00:00 AM
Pacific Standard Time (Mexico)-(UTC-08:00) Baja California 4/29/2025 9:00:00 AM
UTC-08-(UTC-08:00) Coordinated Universal Time-08 4/29/2025 8:00:00 AM
Pacific Standard Time-(UTC-08:00) Pacific Time (US & Canada) 4/29/2025 9:00:00 AM
US Mountain Standard Time-(UTC-07:00) Arizona 4/29/2025 9:00:00 AM
Mountain Standard Time (Mexico)-(UTC-07:00) La Paz, Mazatlan 4/29/2025 9:00:00 AM
Mountain Standard Time-(UTC-07:00) Mountain Time (US & Canada) 4/29/2025 10:00:00 AM
Yukon Standard Time-(UTC-07:00) Yukon 4/29/2025 9:00:00 AM
Central America Standard Time-(UTC-06:00) Central America 4/29/2025 10:00:00 AM
Central Standard Time-(UTC-06:00) Central Time (US & Canada) 4/29/2025 11:00:00 AM
Easter Island Standard Time-(UTC-06:00) Easter Island 4/29/2025 10:00:00 AM
Central Standard Time (Mexico)-(UTC-06:00) Guadalajara, Mexico City, Monterrey 4/29/2025 10:00:00 AM
Canada Central Standard Time-(UTC-06:00) Saskatchewan 4/29/2025 10:00:00 AM
SA Pacific Standard Time-(UTC-05:00) Bogota, Lima, Quito, Rio Branco 4/29/2025 11:00:00 AM
Eastern Standard Time (Mexico)-(UTC-05:00) Chetumal 4/29/2025 11:00:00 AM
Eastern Standard Time-(UTC-05:00) Eastern Time (US & Canada) 4/29/2025 12:00:00 PM
Haiti Standard Time-(UTC-05:00) Haiti 4/29/2025 12:00:00 PM
Cuba Standard Time-(UTC-05:00) Havana 4/29/2025 12:00:00 PM
US Eastern Standard Time-(UTC-05:00) Indiana (East) 4/29/2025 12:00:00 PM
Turks And Caicos Standard Time-(UTC-05:00) Turks and Caicos 4/29/2025 12:00:00 PM
Paraguay Standard Time-(UTC-04:00) Asuncion 4/29/2025 12:00:00 PM
Atlantic Standard Time-(UTC-04:00) Atlantic Time (Canada) 4/29/2025 1:00:00 PM
Venezuela Standard Time-(UTC-04:00) Caracas 4/29/2025 12:00:00 PM
Central Brazilian Standard Time-(UTC-04:00) Cuiaba 4/29/2025 12:00:00 PM
SA Western Standard Time-(UTC-04:00) Georgetown, La Paz, Manaus, San Juan 4/29/2025 12:00:00 PM
Pacific SA Standard Time-(UTC-04:00) Santiago 4/29/2025 12:00:00 PM
Newfoundland Standard Time-(UTC-03:30) Newfoundland 4/29/2025 1:30:00 PM
Tocantins Standard Time-(UTC-03:00) Araguaina 4/29/2025 1:00:00 PM
E. South America Standard Time-(UTC-03:00) Brasilia 4/29/2025 1:00:00 PM
SA Eastern Standard Time-(UTC-03:00) Cayenne, Fortaleza 4/29/2025 1:00:00 PM
Argentina Standard Time-(UTC-03:00) City of Buenos Aires 4/29/2025 1:00:00 PM
Montevideo Standard Time-(UTC-03:00) Montevideo 4/29/2025 1:00:00 PM
Magallanes Standard Time-(UTC-03:00) Punta Arenas 4/29/2025 1:00:00 PM
Saint Pierre Standard Time-(UTC-03:00) Saint Pierre and Miquelon 4/29/2025 2:00:00 PM
Bahia Standard Time-(UTC-03:00) Salvador 4/29/2025 1:00:00 PM
UTC-02-(UTC-02:00) Coordinated Universal Time-02 4/29/2025 2:00:00 PM
Greenland Standard Time-(UTC-02:00) Greenland 4/29/2025 3:00:00 PM
Mid-Atlantic Standard Time-(UTC-02:00) Mid-Atlantic - Old 4/29/2025 3:00:00 PM
Azores Standard Time-(UTC-01:00) Azores 4/29/2025 4:00:00 PM
Cape Verde Standard Time-(UTC-01:00) Cabo Verde Is. 4/29/2025 3:00:00 PM
UTC-(UTC) Coordinated Universal Time 4/29/2025 4:00:00 PM
GMT Standard Time-(UTC+00:00) Dublin, Edinburgh, Lisbon, London 4/29/2025 5:00:00 PM
Greenwich Standard Time-(UTC+00:00) Monrovia, Reykjavik 4/29/2025 4:00:00 PM
Sao Tome Standard Time-(UTC+00:00) Sao Tome 4/29/2025 4:00:00 PM
Morocco Standard Time-(UTC+01:00) Casablanca 4/29/2025 5:00:00 PM
W. Europe Standard Time-(UTC+01:00) Amsterdam, Berlin, Bern, Rome, Stockholm, Vienna 4/29/2025 6:00:00 PM
Central Europe Standard Time-(UTC+01:00) Belgrade, Bratislava, Budapest, Ljubljana, Prague 4/29/2025 6:00:00 PM
Romance Standard Time-(UTC+01:00) Brussels, Copenhagen, Madrid, Paris 4/29/2025 6:00:00 PM
Central European Standard Time-(UTC+01:00) Sarajevo, Skopje, Warsaw, Zagreb 4/29/2025 6:00:00 PM
W. Central Africa Standard Time-(UTC+01:00) West Central Africa 4/29/2025 5:00:00 PM
GTB Standard Time-(UTC+02:00) Athens, Bucharest 4/29/2025 7:00:00 PM
Middle East Standard Time-(UTC+02:00) Beirut 4/29/2025 7:00:00 PM
Egypt Standard Time-(UTC+02:00) Cairo 4/29/2025 7:00:00 PM
E. Europe Standard Time-(UTC+02:00) Chisinau 4/29/2025 7:00:00 PM
West Bank Standard Time-(UTC+02:00) Gaza, Hebron 4/29/2025 7:00:00 PM
South Africa Standard Time-(UTC+02:00) Harare, Pretoria 4/29/2025 6:00:00 PM
FLE Standard Time-(UTC+02:00) Helsinki, Kyiv, Riga, Sofia, Tallinn, Vilnius 4/29/2025 7:00:00 PM
Israel Standard Time-(UTC+02:00) Jerusalem 4/29/2025 7:00:00 PM
South Sudan Standard Time-(UTC+02:00) Juba 4/29/2025 6:00:00 PM
Kaliningrad Standard Time-(UTC+02:00) Kaliningrad 4/29/2025 6:00:00 PM
Sudan Standard Time-(UTC+02:00) Khartoum 4/29/2025 6:00:00 PM
Libya Standard Time-(UTC+02:00) Tripoli 4/29/2025 6:00:00 PM
Namibia Standard Time-(UTC+02:00) Windhoek 4/29/2025 6:00:00 PM
Jordan Standard Time-(UTC+03:00) Amman 4/29/2025 7:00:00 PM
Arabic Standard Time-(UTC+03:00) Baghdad 4/29/2025 7:00:00 PM
Syria Standard Time-(UTC+03:00) Damascus 4/29/2025 7:00:00 PM
Turkey Standard Time-(UTC+03:00) Istanbul 4/29/2025 7:00:00 PM
Arab Standard Time-(UTC+03:00) Kuwait, Riyadh 4/29/2025 7:00:00 PM
Belarus Standard Time-(UTC+03:00) Minsk 4/29/2025 7:00:00 PM
Russian Standard Time-(UTC+03:00) Moscow, St. Petersburg 4/29/2025 7:00:00 PM
E. Africa Standard Time-(UTC+03:00) Nairobi 4/29/2025 7:00:00 PM
Volgograd Standard Time-(UTC+03:00) Volgograd 4/29/2025 7:00:00 PM
Iran Standard Time-(UTC+03:30) Tehran 4/29/2025 7:30:00 PM
Arabian Standard Time-(UTC+04:00) Abu Dhabi, Muscat 4/29/2025 8:00:00 PM
Astrakhan Standard Time-(UTC+04:00) Astrakhan, Ulyanovsk 4/29/2025 8:00:00 PM
Azerbaijan Standard Time-(UTC+04:00) Baku 4/29/2025 8:00:00 PM
Russia Time Zone 3-(UTC+04:00) Izhevsk, Samara 4/29/2025 8:00:00 PM
Mauritius Standard Time-(UTC+04:00) Port Louis 4/29/2025 8:00:00 PM
Saratov Standard Time-(UTC+04:00) Saratov 4/29/2025 8:00:00 PM
Georgian Standard Time-(UTC+04:00) Tbilisi 4/29/2025 8:00:00 PM
Caucasus Standard Time-(UTC+04:00) Yerevan 4/29/2025 8:00:00 PM
Afghanistan Standard Time-(UTC+04:30) Kabul 4/29/2025 8:30:00 PM
West Asia Standard Time-(UTC+05:00) Ashgabat, Tashkent 4/29/2025 9:00:00 PM
Qyzylorda Standard Time-(UTC+05:00) Astana 4/29/2025 9:00:00 PM
Ekaterinburg Standard Time-(UTC+05:00) Ekaterinburg 4/29/2025 9:00:00 PM
Pakistan Standard Time-(UTC+05:00) Islamabad, Karachi 4/29/2025 9:00:00 PM
India Standard Time-(UTC+05:30) Chennai, Kolkata, Mumbai, New Delhi 4/29/2025 9:30:00 PM
Sri Lanka Standard Time-(UTC+05:30) Sri Jayawardenepura 4/29/2025 9:30:00 PM
Nepal Standard Time-(UTC+05:45) Kathmandu 4/29/2025 9:45:00 PM
Central Asia Standard Time-(UTC+06:00) Bishkek 4/29/2025 10:00:00 PM
Bangladesh Standard Time-(UTC+06:00) Dhaka 4/29/2025 10:00:00 PM
Omsk Standard Time-(UTC+06:00) Omsk 4/29/2025 10:00:00 PM
Myanmar Standard Time-(UTC+06:30) Yangon (Rangoon) 4/29/2025 10:30:00 PM
SE Asia Standard Time-(UTC+07:00) Bangkok, Hanoi, Jakarta 4/29/2025 11:00:00 PM
Altai Standard Time-(UTC+07:00) Barnaul, Gorno-Altaysk 4/29/2025 11:00:00 PM
W. Mongolia Standard Time-(UTC+07:00) Hovd 4/29/2025 11:00:00 PM
North Asia Standard Time-(UTC+07:00) Krasnoyarsk 4/29/2025 11:00:00 PM
N. Central Asia Standard Time-(UTC+07:00) Novosibirsk 4/29/2025 11:00:00 PM
Tomsk Standard Time-(UTC+07:00) Tomsk 4/29/2025 11:00:00 PM
China Standard Time-(UTC+08:00) Beijing, Chongqing, Hong Kong, Urumqi 4/30/2025 12:00:00 AM
North Asia East Standard Time-(UTC+08:00) Irkutsk 4/30/2025 12:00:00 AM
Singapore Standard Time-(UTC+08:00) Kuala Lumpur, Singapore 4/30/2025 12:00:00 AM
W. Australia Standard Time-(UTC+08:00) Perth 4/30/2025 12:00:00 AM
Taipei Standard Time-(UTC+08:00) Taipei 4/30/2025 12:00:00 AM
Ulaanbaatar Standard Time-(UTC+08:00) Ulaanbaatar 4/30/2025 12:00:00 AM
Aus Central W. Standard Time-(UTC+08:45) Eucla 4/30/2025 12:45:00 AM
Transbaikal Standard Time-(UTC+09:00) Chita 4/30/2025 1:00:00 AM
Tokyo Standard Time-(UTC+09:00) Osaka, Sapporo, Tokyo 4/30/2025 1:00:00 AM
North Korea Standard Time-(UTC+09:00) Pyongyang 4/30/2025 1:00:00 AM
Korea Standard Time-(UTC+09:00) Seoul 4/30/2025 1:00:00 AM
Yakutsk Standard Time-(UTC+09:00) Yakutsk 4/30/2025 1:00:00 AM
Cen. Australia Standard Time-(UTC+09:30) Adelaide 4/30/2025 1:30:00 AM
AUS Central Standard Time-(UTC+09:30) Darwin 4/30/2025 1:30:00 AM
E. Australia Standard Time-(UTC+10:00) Brisbane 4/30/2025 2:00:00 AM
AUS Eastern Standard Time-(UTC+10:00) Canberra, Melbourne, Sydney 4/30/2025 2:00:00 AM
West Pacific Standard Time-(UTC+10:00) Guam, Port Moresby 4/30/2025 2:00:00 AM
Tasmania Standard Time-(UTC+10:00) Hobart 4/30/2025 2:00:00 AM
Vladivostok Standard Time-(UTC+10:00) Vladivostok 4/30/2025 2:00:00 AM
Lord Howe Standard Time-(UTC+10:30) Lord Howe Island 4/30/2025 2:30:00 AM
Bougainville Standard Time-(UTC+11:00) Bougainville Island 4/30/2025 3:00:00 AM
Russia Time Zone 10-(UTC+11:00) Chokurdakh 4/30/2025 3:00:00 AM
Magadan Standard Time-(UTC+11:00) Magadan 4/30/2025 3:00:00 AM
Norfolk Standard Time-(UTC+11:00) Norfolk Island 4/30/2025 3:00:00 AM
Sakhalin Standard Time-(UTC+11:00) Sakhalin 4/30/2025 3:00:00 AM
Central Pacific Standard Time-(UTC+11:00) Solomon Is., New Caledonia 4/30/2025 3:00:00 AM
Russia Time Zone 11-(UTC+12:00) Anadyr, Petropavlovsk-Kamchatsky 4/30/2025 4:00:00 AM
New Zealand Standard Time-(UTC+12:00) Auckland, Wellington 4/30/2025 4:00:00 AM
UTC+12-(UTC+12:00) Coordinated Universal Time+12 4/30/2025 4:00:00 AM
Fiji Standard Time-(UTC+12:00) Fiji 4/30/2025 4:00:00 AM
Kamchatka Standard Time-(UTC+12:00) Petropavlovsk-Kamchatsky - Old 4/30/2025 5:00:00 AM
Chatham Islands Standard Time-(UTC+12:45) Chatham Islands 4/30/2025 4:45:00 AM
UTC+13-(UTC+13:00) Coordinated Universal Time+13 4/30/2025 5:00:00 AM
Tonga Standard Time-(UTC+13:00) Nuku'alofa 4/30/2025 5:00:00 AM
Samoa Standard Time-(UTC+13:00) Samoa 4/30/2025 5:00:00 AM
Line Islands Standard Time-(UTC+14:00) Kiritimati Island 4/30/2025 6:00:00 AM

Webinar Registration

This is the story of how an attacker gains access to an identity provider’s support case portal, harvests a key piece of data from a file uploaded to the case by a customer and within minutes uses that data to gain access to the systems at that customer. 

But it’s also a story of victory and a real-world demonstration of the power of monitoring, policy and defense-in-depth. 

The Okta/BeyondTrust/Cloudflare incident happened a while back, but it remains the most valuable breach account we have to understand today’s threats in this multi-cloud, distributed and hybrid environment in which we currently fight the good fight. And last week I met Fletcher Davis at BeyondTrust. Fletcher is the Senior Manager of the Research Team at BeyondTrust and has an inside view of this breach. Before BeyondTrust, he was a red teamer at CrowdStrike and Mandiant, so I’m excited that he agreed to join me for this real training for free / anatomy of an attack session.

We will postmortem this breach step-by-step and it includes a bit of everything:

  • The crucial role of MFA and the difference between weak and strong MFA
  • Endpoint security
  • Web API security
  • Tokens, session cookies
  • HAR files
  • Security dependencies between systems and partners
  • Alerting on changes in privileged accounts and entitlements
  • Detecting unusual patterns in web authentication
  • The importance of communication between business partners and the sometimes frustrating process of escalation and getting people to take you seriously
  • Implementing non-default policies specific to your organization
  • Service account management

This fascinating story provides a wealth of lessons we can apply. We will finish up with a list of actionable recommendations that every organization can put to work in any environment.

BeyondTrust was able to detect and immediately respond thanks to their practice of dogfooding their products to protect their own network and Fletcher Davis will briefly show you a demo of the Insights platform and walk through some of the detections that caught the breach, as well as some recent additions that give customers visibility into their Okta privileges and application assignments.

Please join us for this real training for free session.

First Name:  
Last Name:  
Work Email:  
Phone:
Organization:
Country:  
State:
Zip/Postal Code:
Company size:
I'd like to schedule a personalized demo with a BeyondTrust rep for:
Industry:
 

Your information will be shared with the sponsor.

By clicking "Submit", you're agreeing to our Privacy Policy and consenting to be contacted by us and the sponsor.

 

 

Additional Resources