[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"vendor:okta":3},{"vendor":4,"products":15,"links":42,"research":64,"news":107,"iocs":145,"iocs_total":183,"activity":184},{"slug":5,"name":6,"domain":7,"website_url":8,"hq_country":9,"description":10,"logo_path":11,"brand_color":12,"pitch":13,"pitch_source_url":8,"updated_at":14},"okta","Okta","okta.com","https:\u002F\u002Fwww.okta.com\u002F","US","Identity provider for workforce and customer identity: single sign-on, MFA and identity governance.","\u002Fvendor-logos\u002Fokta.png","#002879","The Okta and Auth0 Platforms enable secure access, authentication, and automation, putting Identity at the heart of business security and growth.","2026-10-16T13:44:13.490468+00:00",[16,31],{"slug":17,"name":18,"url":19,"description":20,"pitch":21,"pitch_source_url":19,"controls":22},"workforce-identity","Okta Workforce Identity","https:\u002F\u002Fwww.okta.com\u002Fproducts\u002Fworkforce-identity\u002F","Single sign-on, adaptive MFA including phishing-resistant methods, and lifecycle management for employees.","Okta Workforce Identity provides easy, secure access for your workforce so you can focus on reducing costs, and doing more for your customers.",[23,27],{"slug":24,"name":25,"problem":26},"phishing-resistant-mfa","Phishing-resistant MFA","A stolen password, or a user who taps Approve on a push prompt, is no longer enough to log in.",{"slug":28,"name":29,"problem":30},"identity-governance","Identity governance and single sign-on","People who leave or change roles lose access everywhere at once, and forgotten accounts stop piling up.",{"slug":32,"name":33,"url":34,"description":35,"pitch":36,"pitch_source_url":34,"controls":37},"identity-threat-protection","Okta Identity Threat Protection","https:\u002F\u002Fwww.okta.com\u002Fproducts\u002Fidentity-threat-protection\u002F","Continuous risk assessment of sessions after login, with automatic actions such as ending sessions.","Okta’s AI-driven continuous risk and policy evaluations deliver real-time identity threat assessment and automated responses across your environment.",[38],{"slug":39,"name":40,"problem":41},"identity-threat-detection","Identity threat detection and response (ITDR)","Attackers who log in with real, stolen credentials get noticed.",[43,47,51,55,58,61],{"kind":44,"label":45,"url":46},"advisories","Security advisories","https:\u002F\u002Ftrust.okta.com\u002Fsecurity-advisories\u002F",{"kind":48,"label":49,"url":50},"trust_center","Trust center","https:\u002F\u002Ftrust.okta.com\u002F",{"kind":52,"label":53,"url":54},"review","TechRadar: Okta review (2023)","https:\u002F\u002Fwww.techradar.com\u002Freviews\u002Fokta-review",{"kind":52,"label":56,"url":57},"PeerSpot: Okta Platform user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fokta-platform-reviews",{"kind":52,"label":59,"url":60},"Gartner Peer Insights: Okta Workforce Identity user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fokta-workforce-identity",{"kind":52,"label":62,"url":63},"CSO Online: Okta bets on identity to control AI agents, but is identity enough? (2026)","https:\u002F\u002Fwww.csoonline.com\u002Farticle\u002F4225230\u002Fokta-bets-on-identity-to-control-ai-agents-but-is-identity-alone-enough.html",{"total":65,"stories":66},10,[67,72,77,82,87,92,97,102],{"slug":68,"title":69,"published_at":70,"brief":71},"critical-okta-access-gateway-flaw-lets-attackers-with-admin-access-execute-syste-2eba80","Critical Okta Access Gateway Flaw Lets Attackers With Admin Access Execute System Commands","2026-10-23T15:19:23+00:00","Okta Access Gateway critical flaw allows admin command execution.",{"slug":73,"title":74,"published_at":75,"brief":76},"infostealer-logs-expose-replayable-ai-tokens-that-can-bypass-mfa-a7397c","Infostealer Logs Expose Replayable AI Tokens That Can Bypass MFA","2026-09-09T14:23:55+00:00","Infostealer logs are selling replayable AI tokens that bypass MFA and grant illicit account access.",{"slug":78,"title":79,"published_at":80,"brief":81},"poison-claude-sells-discounted-claude-access-while-its-operator-sees-every-custo-45c69e","Poison Claude Sells Discounted Claude Access While Its Operator Sees Every Customer Prompt","2026-08-05T15:36:03+00:00","Illegal AI model access services like Poison Claude are selling discounted access while exposing customer prompts.",{"slug":83,"title":84,"published_at":85,"brief":86},"cybersecurity-alliance-drafts-safe-guidelines-for-sharing-ai-incident-data-a7f2c9","Cybersecurity Alliance Drafts SAFE Guidelines for Sharing AI Incident Data","2026-08-05T11:11:29+00:00","Cybersecurity alliance drafts SAFE guidelines for sharing AI incident data.",{"slug":88,"title":89,"published_at":90,"brief":91},"openssl-silently-fixes-hollowbyte-dos-vulnerability-cec3ac","OpenSSL Silently Fixes ‘HollowByte’ DoS Vulnerability","2026-07-20T12:32:40+00:00","OpenSSL silently fixes 'HollowByte' DoS vulnerability allowing memory exhaustion.",{"slug":93,"title":94,"published_at":95,"brief":96},"openssl-hollowbyte-flaw-could-freeze-server-memory-with-11-byte-tls-requests-d32c62","OpenSSL HollowByte Flaw Could Freeze Server Memory with 11-Byte TLS Requests","2026-07-17T20:20:53+00:00","OpenSSL HollowByte flaw allows 11-byte TLS requests to exhaust server memory without CVE assignment.",{"slug":98,"title":99,"published_at":100,"brief":101},"okta-warns-of-vishing-attacks-targeting-microsoft-365-customers-68f448","Okta Warns of Vishing Attacks Targeting Microsoft 365 Customers","2026-07-10T11:06:36+00:00","Okta warns of vishing campaign using fake passkey registration to steal Microsoft 365 credentials.",{"slug":103,"title":104,"published_at":105,"brief":106},"hackers-use-fake-microsoft-entra-passkey-enrollment-to-gain-microsoft-365-access-44e86b","Hackers Use Fake Microsoft Entra Passkey Enrollment to Gain Microsoft 365 Access","2026-07-10T10:30:20+00:00","Hackers use vishing and fake Entra passkey enrollment to gain Microsoft 365 access.",{"total":108,"stories":109},8,[110,115,120,125,130,135,140],{"slug":111,"title":112,"published_at":113,"brief":114},"hacker-leaks-data-on-more-than-40-000-homeland-security-employees-7c270a","Hacker leaks data on more than 40,000 Homeland Security employees","2026-10-30T06:26:27+00:00","Hacker leaks personal data of 40,000+ DHS employees after Okta SSO breach.",{"slug":116,"title":117,"published_at":118,"brief":119},"leak-site-publishes-data-on-more-than-41-000-dhs-employees-obtained-by-hacktivis-4da8cc","Leak site publishes data on more than 41,000 DHS employees obtained by hacktivists","2026-10-28T21:33:00+00:00","Hacktivists leak data of over 41,000 DHS employees after breaching identity service.",{"slug":121,"title":122,"published_at":123,"brief":124},"okta-patches-critical-access-gateway-flaw-cve-2026-115547-b96c81","Okta Patches Critical Access Gateway Flaw CVE-2026-115547","2026-10-24T17:04:14+00:00","Okta patches critical CVE-2026-115547 flaw allowing admin command execution.",{"slug":126,"title":127,"published_at":128,"brief":129},"artex-in-the-wild-storm-0940-expands-targeting-of-it-and-software-vendors-50a659","ARTEX in the Wild: Storm-0940 Expands Targeting of IT and Software Vendors","2026-10-22T13:05:31+00:00","Storm-0940 uses ARTEX AI agent to target identity providers and IT vendors in October 2026.",{"slug":131,"title":132,"published_at":133,"brief":134},"unc6671-vishing-attacks-target-personal-phones-to-steal-saas-data-37859b","UNC6671 Vishing Attacks Target Personal Phones to Steal SaaS Data","2026-08-07T18:16:13+00:00","UNC6671 uses vishing to steal SaaS data by tricking employees into spoofed login portals.",{"slug":136,"title":137,"published_at":138,"brief":139},"fbi-flagged-phishing-kit-kali365-expands-its-reach-b67680","FBI-Flagged Phishing Kit Kali365 Expands Its Reach","2026-06-02T21:32:24+00:00","FBI-flagged Kali365 phishing kit expands from Microsoft 365 to AWS, Okta, and Russian platforms",{"slug":141,"title":142,"published_at":143,"brief":144},"nordstrom-s-email-system-abused-to-send-crypto-scams-to-customers","Nordstrom's email system abused to send crypto scams to customers","2026-03-18T13:55:49+00:00",null,[146,149,152,154,156,158,159,161,164,166,168,170,172,174,176,179,181],{"type":147,"value":148,"article_slug":111,"article_title":112,"published_at":113},"malware","Icepick",{"type":150,"value":151,"article_slug":121,"article_title":122,"published_at":123},"cve","CVE-2026-109618",{"type":150,"value":153,"article_slug":121,"article_title":122,"published_at":123},"CVE-2026-109619",{"type":150,"value":155,"article_slug":121,"article_title":122,"published_at":123},"CVE-2026-115546",{"type":150,"value":157,"article_slug":121,"article_title":122,"published_at":123},"CVE-2026-115547",{"type":150,"value":157,"article_slug":68,"article_title":69,"published_at":70},{"type":147,"value":160,"article_slug":126,"article_title":127,"published_at":128},"ARTEX",{"type":162,"value":163,"article_slug":126,"article_title":127,"published_at":128},"mitre_attack","T1078",{"type":162,"value":165,"article_slug":126,"article_title":127,"published_at":128},"T1110",{"type":162,"value":167,"article_slug":126,"article_title":127,"published_at":128},"T1550",{"type":162,"value":169,"article_slug":126,"article_title":127,"published_at":128},"T1592",{"type":147,"value":171,"article_slug":131,"article_title":132,"published_at":133},"PowerShell scripts",{"type":147,"value":173,"article_slug":131,"article_title":132,"published_at":133},"Python scripts",{"type":147,"value":175,"article_slug":136,"article_title":137,"published_at":138},"Kali365",{"type":177,"value":178,"article_slug":141,"article_title":142,"published_at":143},"email","nordstrom@eml.nordstrom.com",{"type":162,"value":180,"article_slug":141,"article_title":142,"published_at":143},"T1566.002",{"type":162,"value":182,"article_slug":141,"article_title":142,"published_at":143},"T1621",17,[185,189,192,195,197,200],{"month":186,"reported":187,"affected":188},"2026-06-01",0,1,{"month":190,"reported":191,"affected":187},"2026-07-01",6,{"month":193,"reported":194,"affected":188},"2026-08-01",2,{"month":196,"reported":188,"affected":187},"2026-09-01",{"month":198,"reported":188,"affected":199},"2026-10-01",5,{"month":201,"reported":187,"affected":187},"2026-11-01"]