Okta stories

Bitwarden adds a one-click login policy that extends SSO-style access to unmanaged web apps, automating vault-based sign-ins via IdP dashboards.

ShinyHunters shifts to subdomain-brand phishing and vishing on mobiles, bypassing domain checks to hijack SSO logins and SaaS sessions.

ExtraHop sharpens its network detection tools with deeper identity and Kubernetes insight to power more reliable agentic SOC automation.

Okta launches Agent Discovery to uncover and rein in shadow AI agents, mapping risky app access and tightening identity-based controls.

Okta warns North Korean operatives are landing remote tech jobs with stolen and synthetic identities to fund the regime and enable cyber attacks.

Portnox extends zero trust network access to RDP, SSH, VNC and Telnet, promising passwordless admin access and fewer VPN dependencies.

AvePoint extends its Confidence Platform to tighten agentic AI governance and broaden multi-cloud backup across major SaaS and IaaS tools.

Okta expands PGA of America deal to unite staff and fan identity security, underpinning the golf body's push into AI-driven digital services.

Semperis has bought MightyID to extend its identity resilience platform with Okta and Ping backup and recovery across hybrid environments.

Infostealer attacks are increasingly compromising enterprise SSO, with Flare warning 16% of late-2025 infections exposed identity access.

Okta users face rising vishing attacks as ShinyHunters expand real-time MFA phishing, prompting fresh SaaS and identity security warnings.

Panera data breach exposes details of 14 million customers, spotlighting a surge in SaaS-focused extortion and identity-driven cyber attacks.

Okta warns new real-time vishing kits can hijack browser sessions during calls, tricking users into defeating non‑phishing‑resistant MFA.

CrowdStrike will acquire identity security specialist SGNL to add continuous, AI-ready access enforcement across human and machine users.

KnowBe4 research shows personalised phishing emails mimicking HR or IT cause highest employee click rates, exploiting trust in internal communications.

AvePoint enhances its Confidence Platform with new multi-SaaS data protection and AI oversight tools to boost security and compliance in complex cloud environments.

Rubrik has been named a Leader in the IDC MarketScape 2025 report for its advanced AI-driven cyber-recovery and identity resilience solutions.

Salesforce expands its platform with new data governance and AI tools to improve enterprise AI success and security, addressing key challenges in scaling AI.

The OpenID Foundation has launched the first global standards enabling real-time sharing of security alerts across digital identity systems, boosting online protection.

Specops uReset now supports cloud-only Entra ID, enabling 24/7 self-service password resets and reducing IT help desk password-related calls.