Okta SSO accounts targeted in vishing-based data theft attacks

Okta is warning about custom phishing kits built specifically for voice-based social engineering (vishing) attacks.

ShinyHunters claim to be behind SSO-account data theft attacks

The ShinyHunters extortion gang claims it is behind a wave of ongoing voice phishing attacks targeting single sign-on (SSO) ...
Business Wire

New Security Alert from Push Security: Cross-IdP Impersonation Threatens SSO Security to Gain Unauthorized Access to Downstream Apps

LONDON--(BUSINESS WIRE)--Security researchers at Push Security, a pioneer in identity threat detection and response (ITDR), have identified a new technique used by attackers known as "Cross-IdP ...
Dark Reading

Even Orgs With SSO Are Vulnerable to Identity-Based Attacks

With organizations adopting cloud services, mobile devices, and other digital technologies to meet customer needs and support an increasingly remote workforce, identity has become the security ...