Okta Threat Intelligence

ID: 17fcf1ea-ae59-5fc3-8d6e-a08aa53fb4d8

STIX ID: identity--17fcf1ea-ae59-5fc3-8d6e-a08aa53fb4d8

Feed Type: rss

Earliest post: 2025-10-06

Latest post: 2026-08-04

Identity-focused threat intelligence from Okta, covering global attacks and vulnerabilities affecting authentication, access, MFA, phishing resistance, session security, and identity infrastructure.

Exclude posts that do not describe a security incident

Classification

Min Pub Date

01/01/2020

Max Pub Date

08/11/2026

Title	Date Published ↓	Describes Incident	Author	Visible
Behind the scenes of a vishing operation	2026-07-27	True		True
Behind the scenes of a vishing operation	2026-07-27	True		True
How to stop attackers from self-serving their way into accounts	2026-07-09	True	Brett Winterford	True
How to stop attackers from self-serving their way into accounts	2026-07-09	True	Brett Winterford	True
Vishing actors target Entra passkey enrollment	2026-07-05	True		True
Vishing actors target Entra passkey enrollment	2026-07-05	True		True
Vishing actors target Entra passkey enrollment	2026-07-04	True		True
Vishing actors target Entra passkey enrollment	2026-07-04	True		True
Defending against TeamPCP software supply chain attacks \| Threat Intelligence	2026-05-17	True	Jeremy Kirk, George Wang	True
Defending against TeamPCP software supply chain attacks \| Threat Intelligence	2026-05-17	True	Jeremy Kirk, George Wang	True
Defending against TeamPCP software supply chain attacks \| Threat Intelligence	2026-05-17	True	Jeremy Kirk, George Wang	True
Device code phishing: it's phishing with dynamite	2026-05-10	True	Brett Winterford	True
Device code phishing: it's phishing with dynamite	2026-05-10	True	Brett Winterford	True
Tycoon 2FA phishing actors disperse, branch into new attacks \| Threat Intelligence	2026-05-02	True	Houssem Eddine Bordjiba, Daniel López, Jeremy Kirk	True
Tycoon 2FA phishing actors disperse, branch into new attacks \| Threat Intelligence	2026-05-02	True	Houssem Eddine Bordjiba, Daniel López, Jeremy Kirk	True
Tycoon 2FA phishing actors scatter, branch into new attacks \| Threat Intelligence	2026-04-30	True	Houssem Eddine Bordjiba, Daniel López, Jeremy Kirk	True
Blocking shady network traffic can reduce account takeover attempts	2026-03-30	True	Jeremy Kirk, Mathew Woodyard	True
BreachForums logs reveal anonymizers of choice for shady characters	2026-03-28	True	Jeremy Kirk, Mathew Woodyard	True
BreachForums logs reveal anonymizers of choice for shady characters	2026-03-28	True	Jeremy Kirk, Mathew Woodyard	True
LiteLLM supply chain attack: an explainer for identity pros	2026-03-24	True	Brett Winterford	True
LiteLLM supply chain attack: an explainer for identity pros	2026-03-24	True	Brett Winterford	True
LiteLLM supply chain attack: an explainer for identity pros	2026-03-24	True	Brett Winterford	True
Disrupting ShieldGuard: a security extension primed to drain crypto wallets	2026-03-16	True	Grayson Schermerhorn, Yang Wang, Simon Conant, Adam Smallhorn	True
Disrupting ShieldGuard: a security extension primed to drain crypto wallets	2026-03-16	True	, Yang Wang, Simon Conant, Adam Smallhorn	True
Disrupting ShieldGuard: a security extension primed to drain crypto wallets	2026-03-16	True	, Yang Wang, Simon Conant, Adam Smallhorn	True
Vietnam-based cybercrime markets enable account sign-ups at scale	2026-02-28	True	Mathew Woodyard, Angelos K. Marnerides, Michael Photiades, Jeremy Kirk	True
Vietnam-based cybercrime markets enable account sign-ups at scale	2026-02-28	True	Mathew Woodyard, Angelos K. Marnerides, Michael Photiades, Jeremy Kirk	True
Vietnam-based cybercrime markets enable account sign-ups at scale	2026-02-28	True	Mathew Woodyard, Angelos K. Marnerides, Michael Photiades, Jeremy Kirk	True
Universities exposed to account takeover risk from contract cheating services	2026-02-16	True		True
Universities exposed to account takeover risk from contract cheating services	2026-02-16	True		True
Universities exposed to account takeover risk from contract cheating services	2026-02-15	True		True
The North Korean on your payroll	2026-02-11	True	Simon Conant, Alex Tilley	True
The North Korean on your payroll	2026-02-11	True	Simon Conant, Alex Tilley	True
The North Korean on your payroll	2026-02-11	True	Simon Conant, Alex Tilley	True
Detecting OpenClaw using advanced posture checks	2026-02-09	True	Rafa Bono	True
Detecting OpenClaw using advanced posture checks	2026-02-09	True	Rafa Bono	True
Detecting OpenClaw using advanced posture checks	2026-02-09	True	Rafa Bono	True
Phishing kits adapt to the script of callers	2026-01-22	True		True
Phishing kits adapt to the script of callers	2026-01-21	True		True
Phishing kits adapt to the script of callers	2026-01-21	True		True
Jobseekers exploited in fake recruiter phishing campaigns	2025-12-19	True	Daniel López	True
Jobseekers exploited in fake recruiter phishing campaigns	2025-12-19	True	Daniel López	True
Jobseekers exploited in fake recruiter phishing campaigns	2025-12-18	True		True
Phishing campaigns use 'Employee Benefits' lure to intercept Microsoft and Okta logins	2025-10-20	True		True
Wide-scale, opportunistic SMS pumping attacks target customer sign-up pages	2025-10-13	True		True
The s1ngularity attack: When attackers prompt your AI agents to do their bidding	2025-10-06	True	Brett Winterford	True