AuthFront (Authentication)

Vista website login errors

Resolved

Incident Resolved: CTIM-1824
The attack traffic fingerprint was identified and blocked for the affected domains as confirmed by Auth0. Login failures have declined and bad requests are at a normal level. Incident is contained.
Please contact CTIM or see ticket for more details.

Updated

UPDATE:

Failed request counts are declining. Still awaiting an update from the vendor (Auth0). Next update in 30min or sooner.

Updated

UPDATE:

Access teams have already filed a request with Auth0. The vendor is currently working to block the identified traffic. We will update again in 30min or sooner.

Investigating

New Incident: CTIM-1824
Priority: Critical
Escalation sent to: Access Domain for review.
Access Domain teams have identified increased login failures for users on the Vista website due to timeouts/rate limiting from the auth service. This appears to be the result of a coordinated attack similar to previous incidents. Access support teams are already online and reviewing the issue.