American identity and access management giant Okta revealed that that its private GitHub repositories were hacked this month.

Okta revealed that its private GitHub repositories were hacked this month, the news was first reported by BleepingComputer which had access to ‘confidential’ email notification sent by Okta.

According to the notification threat actors have stolen the Okta’s source code.

“As soon as Okta learned of the possible suspicious access, we promptly placed temporary restrictions on access to Okta GitHub repositories and suspended all GitHub integrations with third-party applications.” reads the email sent by the company “We have since reviewed all recent access to Okta software repositories hosted by GitHub to understand the scope of the exposure, reviewed all recent commits to Okta software repositories hosted with GitHub to validate the integrity of our code, and rotated GitHub credentials. We have also notified law enforcement.”

The security breach was discovered by GitHub earlier this month when the company noticed suspicious access to Okta’s code repositories.

“Upon investigation, we have concluded that such access was used to copy Okta code repositories,” writes David Bradbury, the Okta Chief Security Officer (CSO) in the mail.

According to the notification, intruders did not gain access to its service or customer data

Okta states that “HIPAA, FedRAMP or DoD customers” were not affected.

The incident is related to the Okta Workforce Identity Cloud (WIC) code repositories and doesn’t impact Auth0 Customer Identity Cloud products. 

The company announced to have taken steps to prevent threat actors can use the stolen code to access company or customer environments.

In March 2022, the Lapsus$ extortion group has stolen sensitive data from Okta, including customer data, and published screenshots of the stolen data on its Telegram channel.

The company launched an investigation into the claims of a data breach, while the CEO Todd McKinnon confirmed that in late January 2022 the company detected an attempt to compromise the account of a third-party customer support engineer working for one of its subprocessors.

The company revealed that the security breach impacted 2.5% of its customers (approximately 375), but pointed out that they have no action that should do. The Lapsus$ extortion group compromised the laptop of one of its support engineers that allowed them to reset passwords for some of its customers.

Investigators discovered that the attackers had access to the laptop for five days starting from January 16, 2022.

Follow me on Twitter: @securityaffairs and Facebook and Mastodon

Pierluigi Paganini

(SecurityAffairs – hacking, GitHub)

The post Okta revealed that its private GitHub repositories were hacked this month appeared first on Security Affairs.

Source link

The post Russians strike Dnipropetrovsk region with heavy artillery appeared first on Ukraine Intelligence.

tommaso79/Getty Images

• HHS said today that states can now access the national stockpile of Tamiflu, a flu antiviral.
• There’s a shortage of the medicine, thanks to a rough start to this flu season.
• This comes as flu season continues to sweep across the US, with thousands of hospitalizations.

The US government is releasing doses of the flu treatment Tamiflu from the national stockpile amid a concerning rise in cases, the Department of Health and Human Services said on Wednesday. 

States were given access to their own stockpiles last week, according to the statement. The US said millions of extra treatment courses have been made available to help fight a shortage of the medicine.

Tamiflu can shorten the course of your flu infection, if given within the first 48 hours. The drug can also be given prophylactically to prevent flu cases in people who are exposed to the illness.

Rui Vieira/PA Images via Getty Images

This flu season is intense—and it started early.  The US estimates that there have been at least 150,000 hospitalizations and 9,300 deaths so far this season, The New York Times reported. CDC Director Rochelle Walensky said on December 5 that flu hospitalizations are the highest they’ve been in a decade.

“We have made it clear to every Governor that the Biden-Harris Administration stands ready to assist with resources and supplies,” HHS Secretary Xavier Becerra said in Wednesday’s statement. 

Tamiflu works by stopping the flu virus from replicating in your body. It helps alleviate symptoms, and it’s most effective when taken within 48 hours of symptoms appearing.

There’s a national shortage of generic forms of Tamiflu, Fierce Pharma reported on Wednesday. Other medications are in short supply as well, as the US grapples with surges in other viruses, including RSV and COVID-19. They include amoxicillin, albuterol, and Tylenol. There are alternatives available, but shortages of amoxicillin may not ease until 2023, and it’s not clear when the other shortages will abate either.

The Tesla Model S, 3, X, and Y range from around $50,000 to $140,000.

Tesla

• Some Tesla owners and buyers tiring of Elon Musk’s Twitter antics, according to various reports. 
• Although Tesla sells some great cars, it’s not the only one making appealing, zero-emission rides. 
• Brands like Hyundai and Mercedes make high-quality alternatives to Musk’s vehicles. 

Since buying Twitter for $44 billion in October, Elon Musk has become an increasingly erratic and polarizing presence on the web. He’s attacked Dr. Anthony Fauci, suspended journalists’ Twitter accounts without explanation, and laid off thousands of employees. 

The Tesla and Twitter CEO’s ceaseless antics are repelling some Tesla owners and potential buyers from the electric-car company, which historically had some of the best brand loyalty in the business. 

But there’s good news for dejected Tesla fans: Although Tesla is by far the most popular maker of electric vehicles in the US, nowadays there are plenty of other appealing EVs to choose from. 

Instead of a Model S, consider: 

The 2022 Mercedes-Benz EQS 580.

Tim Levin/Insider

Tesla’s Model S sedan has historically been the electric car against which all new EVs are measured. It remains a technological leader a decade after its launch, offering a whopping 405 miles of range and supercar-like acceleration. 

The Mercedes-Benz EQS is one excellent alternative. An electric take on the German brand’s flagship S Class, the EQS offers up 350 miles of range, a buttery smooth ride, and — for tech-obsessed buyers — an optional 56-inch array of screens. Pricing starts at around $102,000, and a souped-up AMG version is available for $147,500. 

Instead of a Model 3, consider:

The Polestar 2.

Alanis King

At $46,990, the sporty Model 3 sedan is Tesla’s cheapest car and the model that launched the brand into the mainstream. 

You could instead consider the Polestar 2, the first all-electric car from Volvo’s luxury-EV subsidiary. It handles nicely, delivers up to 270 miles of range, has hatchback practicality, and features a minimalist, uncluttered interior just like a Tesla. Plus, its Google-based software looks great and is exceptionally easy to use. 

And, much like Musk’s company, Polestar sells its cars online without the fuss of dealership markups. 

Instead of a Model X, consider:

The Rivian R1S.

Tim Levin/Insider

Big, three-row SUVs have been a bit of a weak spot in the industry’s shift to EVs. But more options are coming online to challenge the $120,990 Model X. 

The new Rivian R1S is a mind-blowingly good family-hauler that’s equally competent at school drop-offs and off-road adventures. The second consumer model from California startup Rivian, the R1S has seven seats, tons of cargo space, and a powerful four-wheel-drive system that makes light work out of treacherous trails. 

Great news for fans of Tesla’s Apple-store aesthetic: Rivian’s vehicles have big touchscreens, lots of cool tech, and a spartan, button-free style.

Rivian SUVs are backordered into oblivion as the company ramps up production, but they are available lightly used. 

Instead of a Model Y, consider:

The 2022 Hyundai Ioniq 5 Limited AWD.

Tim Levin/Insider

There’s a swarm of small electric SUVs on offer from Ford, Volkswagen, Audi, Volvo, and more. And it makes sense: SUVs are America’s favorite vehicles. 

The Hyundai Ioniq 5 stands out. The SUV-hatchback-thing turns heads with its bold, retro futuristic looks — complete with hard creases and lights comprised of teeny-tiny pixels. Inside, it feels remarkably spacious and relaxing, thanks to a modern aesthetic, a totally flat floor, and a center console that can slide fore and aft to make room.

The 2023 model starts at $41,450. But you’ll need to pony up at least $45,500 to snag the SUV’s 303-mile max range. 

Are you a Tesla owner, potential buyer, or employee with a story to share? Reconsidering your relationship to the brand? Contact this reporter at tlevin@insider.com

Nike CEO John Donahoe

ServiceNow

• For the past several years, Nike’s been focused on direct and digital sales.
• On Tuesday, the sportswear company reported big jumps in both. 
• Nike shares jumped 13% in early trading Wednesday.

Nike shares jumped more than 13% Wednesday morning after the company late Tuesday reported sales and profits ahead of Wall Street expectations.

Since 2017, the company has been focused on growing direct and digital sales, a plan that accelerated in 2020 under CEO John Donahoe. Although skeptics remain, Tuesday’s earnings report included sizable increases in digital and direct sales, suggesting the plan is working.

Nike is “creating more separation between us and our competition thanks to the meaningful relationships we have with consumers and the continued success of our strategy,” Donahoe said at the opening of a Tuesday earnings call. 

Membership, a key part of growing direct sales, is booming. 

The quarter that ended on November 30 was the “biggest member demand quarter ever,” Donahoe said. “We saw double-digit growth in member engagement.”

Donahoe said Nike now has 160 million active members. Those members are shopping more with Nike.

For the three months ended November 30, direct sales, including in Nike stores and on Nike apps, increased 16%. Digital sales were up 25%.

Revenue increased 17% to $13.3 billion, ahead of analyst expectations.

“Nike’s investments in product innovation, supply chain speed, and digital are unlocking what is likely a multi-year period of above average growth,” UBS wrote in a Wednesday note to investors. 

The firm has a buy rating on the stock. 

Goldman Sachs reiterated its buy rating on Wednesday, listing four factors driving the stock higher, including direct-sales “fueling greater profitability over time.”

As part of the consumer-first effort, Nike’s working to connect its inventory more closely with wholesale partners and opening more stores. In recent years, Nike also cut ties with about 50% of its wholesale partners in order to drive more shoppers to Nike stores and apps. 

Some analysts took a more cautious note on Wednesday, including Williams Trading analyst Sam Poser, who, while noting Nike’s direct business is improving, said Nike is still sitting on piles of inventory. He cautioned investors to “remain on the sidelines” and not purchase any more stock. 

For the quarter, inventory increased 43% to more than $9.3 billion. Three months ago, Nike reported a 44% increase in inventory. 

In his pitch to Wall Street on Tuesday’s call, Donahoe emphasized the company’s “current headwinds,” including inventory, are temporary, but the company’s “tailwinds,” including the consumer embrace of digital shopping, is “structural.” 

“We’ve leveraged our competitive advantages, which include a relentless innovation pipeline, unmatched brands and deep consumer connections to build relative strength and stay ahead of competition,” Donahoe said.