Ransomware group Lapsus$ claimed to have stolen source code from Microsoft and gained control of a superuser account at identity authentication provider Okta. Okta CEO Todd McKinnon confirmed the incident at Okta on Twitter on Tuesday. Security researcher Bill Demirkapi says the posts indicate that the attackers breached the machine of a third-party support staff member working for Sykes Enterprises, Inc. Okta was aware of the incident in late January but did not disclose it until this week. The company’s CSO described the incident as relatively minor.”]

