Okta Warns of Credential Stuffing Attacks Targeting Cross-Origin Authentication

May 30, 2024 at 07:54AM Okta warns customers of credential stuffing attacks targeting its Customer Identity Cloud’s cross-origin authentication feature. The company advises reviewing logs for suspicious activity, rotating compromised passwords, and enrolling in passwordless authentication. Okta recommends strong password requirements, multi-factor authentication, and other security measures to mitigate the risks. Shares of Okta are … Read more

Okta: Credential-Stuffing Attacks Spike via Proxy Networks

April 29, 2024 at 04:46PM Credential-stuffing attacks on online services are rising, leading to Okta advising its users. Okta’s researchers noticed a surge in attacks on Okta accounts from April 19 to 26. Attacks use anonymous devices like Tor and residential proxies such as NSOCKS, Luminati, and Datalmpulse. Okta introduced a feature to block such … Read more