Okta’s hack explanation, Looney Tunables exploited, Lazarus likes KandyKorn

Okta explains hack source and response timeline

Looney Tunables now being exploited

Lazarus Group uses KandyKorn against blockchain engineers

Thanks to today's episode sponsor, OffSec

And now a word from our sponsor. OffSec (formerly Offensive Security), the cyber training company behind the well-known OSCP certification and Kali Linux distro, is hosting a virtual summit for CISOs and Cybersecurity leaders called Evolve on November 15th. During the event, you'll learn how to attract and assess top talent, how to craft positioning for budget conversations, why CISOs make great board members, and more.  Hear from forward-thinking infosec leaders from companies like CISCO, Amazon, and Salesforce. Save your seat and equip yourself with actionable takeaways to help shape the future of your organization's security. Register now at offsec.com/evolve

For the stories behind the headlines, head to CISOseries.com.