[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"vendor:okta":3},{"vendor":4,"products":15,"links":42,"research":64,"news":102,"iocs":120,"iocs_total":136,"activity":137},{"slug":5,"name":6,"domain":7,"website_url":8,"hq_country":9,"description":10,"logo_path":11,"brand_color":12,"pitch":13,"pitch_source_url":8,"updated_at":14},"okta","Okta","okta.com","https:\u002F\u002Fwww.okta.com\u002F","US","Identity provider for workforce and customer identity: single sign-on, MFA and identity governance.","\u002Fvendor-logos\u002Fokta.png","#002879","The Okta and Auth0 Platforms enable secure access, authentication, and automation, putting Identity at the heart of business security and growth.","2026-10-16T13:44:13.490468+00:00",[16,31],{"slug":17,"name":18,"url":19,"description":20,"pitch":21,"pitch_source_url":19,"controls":22},"workforce-identity","Okta Workforce Identity","https:\u002F\u002Fwww.okta.com\u002Fproducts\u002Fworkforce-identity\u002F","Single sign-on, adaptive MFA including phishing-resistant methods, and lifecycle management for employees.","Okta Workforce Identity provides easy, secure access for your workforce so you can focus on reducing costs, and doing more for your customers.",[23,27],{"slug":24,"name":25,"problem":26},"phishing-resistant-mfa","Phishing-resistant MFA","A stolen password, or a user who taps Approve on a push prompt, is no longer enough to log in.",{"slug":28,"name":29,"problem":30},"identity-governance","Identity governance and single sign-on","People who leave or change roles lose access everywhere at once, and forgotten accounts stop piling up.",{"slug":32,"name":33,"url":34,"description":35,"pitch":36,"pitch_source_url":34,"controls":37},"identity-threat-protection","Okta Identity Threat Protection","https:\u002F\u002Fwww.okta.com\u002Fproducts\u002Fidentity-threat-protection\u002F","Continuous risk assessment of sessions after login, with automatic actions such as ending sessions.","Okta’s AI-driven continuous risk and policy evaluations deliver real-time identity threat assessment and automated responses across your environment.",[38],{"slug":39,"name":40,"problem":41},"identity-threat-detection","Identity threat detection and response (ITDR)","Attackers who log in with real, stolen credentials get noticed.",[43,47,51,55,58,61],{"kind":44,"label":45,"url":46},"advisories","Security advisories","https:\u002F\u002Ftrust.okta.com\u002Fsecurity-advisories\u002F",{"kind":48,"label":49,"url":50},"trust_center","Trust center","https:\u002F\u002Ftrust.okta.com\u002F",{"kind":52,"label":53,"url":54},"review","TechRadar: Okta review (2023)","https:\u002F\u002Fwww.techradar.com\u002Freviews\u002Fokta-review",{"kind":52,"label":56,"url":57},"PeerSpot: Okta Platform user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fokta-platform-reviews",{"kind":52,"label":59,"url":60},"Gartner Peer Insights: Okta Workforce Identity user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fokta-workforce-identity",{"kind":52,"label":62,"url":63},"CSO Online: Okta bets on identity to control AI agents, but is identity enough? (2026)","https:\u002F\u002Fwww.csoonline.com\u002Farticle\u002F4225230\u002Fokta-bets-on-identity-to-control-ai-agents-but-is-identity-alone-enough.html",{"total":65,"stories":66},9,[67,72,77,82,87,92,97],{"slug":68,"title":69,"published_at":70,"brief":71},"infostealer-logs-expose-replayable-ai-tokens-that-can-bypass-mfa-a7397c","Infostealer Logs Expose Replayable AI Tokens That Can Bypass MFA","2026-09-09T14:23:55+00:00","Infostealer logs are selling replayable AI tokens that bypass MFA and grant illicit account access.",{"slug":73,"title":74,"published_at":75,"brief":76},"poison-claude-sells-discounted-claude-access-while-its-operator-sees-every-custo-45c69e","Poison Claude Sells Discounted Claude Access While Its Operator Sees Every Customer Prompt","2026-08-05T15:36:03+00:00","Illegal AI model access services like Poison Claude are selling discounted access while exposing customer prompts.",{"slug":78,"title":79,"published_at":80,"brief":81},"cybersecurity-alliance-drafts-safe-guidelines-for-sharing-ai-incident-data-a7f2c9","Cybersecurity Alliance Drafts SAFE Guidelines for Sharing AI Incident Data","2026-08-05T11:11:29+00:00","Cybersecurity alliance drafts SAFE guidelines for sharing AI incident data.",{"slug":83,"title":84,"published_at":85,"brief":86},"openssl-silently-fixes-hollowbyte-dos-vulnerability-cec3ac","OpenSSL Silently Fixes ‘HollowByte’ DoS Vulnerability","2026-07-20T12:32:40+00:00","OpenSSL silently fixes 'HollowByte' DoS vulnerability allowing memory exhaustion.",{"slug":88,"title":89,"published_at":90,"brief":91},"openssl-hollowbyte-flaw-could-freeze-server-memory-with-11-byte-tls-requests-d32c62","OpenSSL HollowByte Flaw Could Freeze Server Memory with 11-Byte TLS Requests","2026-07-17T20:20:53+00:00","OpenSSL HollowByte flaw allows 11-byte TLS requests to exhaust server memory without CVE assignment.",{"slug":93,"title":94,"published_at":95,"brief":96},"okta-warns-of-vishing-attacks-targeting-microsoft-365-customers-68f448","Okta Warns of Vishing Attacks Targeting Microsoft 365 Customers","2026-07-10T11:06:36+00:00","Okta warns of vishing campaign using fake passkey registration to steal Microsoft 365 credentials.",{"slug":98,"title":99,"published_at":100,"brief":101},"hackers-use-fake-microsoft-entra-passkey-enrollment-to-gain-microsoft-365-access-44e86b","Hackers Use Fake Microsoft Entra Passkey Enrollment to Gain Microsoft 365 Access","2026-07-10T10:30:20+00:00","Hackers use vishing and fake Entra passkey enrollment to gain Microsoft 365 access.",{"total":103,"stories":104},3,[105,110,115],{"slug":106,"title":107,"published_at":108,"brief":109},"unc6671-vishing-attacks-target-personal-phones-to-steal-saas-data-37859b","UNC6671 Vishing Attacks Target Personal Phones to Steal SaaS Data","2026-08-07T18:16:13+00:00","UNC6671 uses vishing to steal SaaS data by tricking employees into spoofed login portals.",{"slug":111,"title":112,"published_at":113,"brief":114},"fbi-flagged-phishing-kit-kali365-expands-its-reach-b67680","FBI-Flagged Phishing Kit Kali365 Expands Its Reach","2026-06-02T21:32:24+00:00","FBI-flagged Kali365 phishing kit expands from Microsoft 365 to AWS, Okta, and Russian platforms",{"slug":116,"title":117,"published_at":118,"brief":119},"nordstrom-s-email-system-abused-to-send-crypto-scams-to-customers","Nordstrom's email system abused to send crypto scams to customers","2026-03-18T13:55:49+00:00",null,[121,124,126,128,131,134],{"type":122,"value":123,"article_slug":106,"article_title":107,"published_at":108},"malware","PowerShell scripts",{"type":122,"value":125,"article_slug":106,"article_title":107,"published_at":108},"Python scripts",{"type":122,"value":127,"article_slug":111,"article_title":112,"published_at":113},"Kali365",{"type":129,"value":130,"article_slug":116,"article_title":117,"published_at":118},"email","nordstrom@eml.nordstrom.com",{"type":132,"value":133,"article_slug":116,"article_title":117,"published_at":118},"mitre_attack","T1566.002",{"type":132,"value":135,"article_slug":116,"article_title":117,"published_at":118},"T1621",6,[138,141,144,146,149,151],{"month":139,"reported":140,"affected":140},"2026-05-01",0,{"month":142,"reported":140,"affected":143},"2026-06-01",1,{"month":145,"reported":136,"affected":140},"2026-07-01",{"month":147,"reported":148,"affected":143},"2026-08-01",2,{"month":150,"reported":143,"affected":140},"2026-09-01",{"month":152,"reported":140,"affected":140},"2026-10-01"]