Okta patches Cloud Services after Node.js security releases
Okta and Auth0 report no exploitation evidence and tell customers to move Auth0 Actions to Node 22 and patch SDK runtimes.
Stories per day · 30 days
3 RSS
Relateddhs10data-leak7ice6auth05identity4cbp3employee-data3access-gateway2certificate-authority2cisa2data-breach2ddosecrets2emudhra2entra-id2government2hacktivism2nodejs2tls2
42 stories, newest first · one card per story
Stories tagged #okta
Qubole supply chain attack exposed AWS, Entra ID, and Okta credentials
From October 14 to October 26, stolen Qubole AWS credentials let an attacker assume roles in dozens of customer accounts.
Most consumers aren’t ready to let AI agents shop unsupervised
Only 37% of North American consumers are ready for fully unsupervised AI agent actions, with willingness exceeding 50% when approvals are allowed.
1
Hackers publish work details on more than 41,000 DHS employees
The Icepick dump lists ICE, CBP and CISA contacts and internal groups; DHS calls it a potential breach.
Hacker leaks work contacts for more than 40,000 DHS employees
Records cover CBP, ICE, and CISA staff; the leaker claims an Okta SSO source, which Okta says it has no evidence was compromised.
Leak exposes records on more than 41,000 DHS workers
The archive includes emails, phones, office addresses, and groups tied to undercover and surveillance programs.
Hacktivists publish records of more than 41,000 DHS employees
The Icepick dataset, published October 28, covers ICE and CBP staff and groups tied to undercover work; Okta denies a breach.
Leak exposes personal details of over 41,000 DHS employees
Distributed Denial of Secrets published records it attributes to “Department of Peace”; Reuters matched some entries but not the collection method.
DDoSecrets publishes records of 41,000 DHS personnel, including undercover links
The Icepick archive, last updated August 19, lists emails, phones, supervisors, and more than 55,000 permission groups across seven DHS components.
Leak site publishes data on more than 41,000 DHS employees
Hacktivists calling themselves Department of Peace say they took an Okta SSO database; Okta denies any compromise.
2
Hacker publishes work data on more than 40,000 Homeland Security employees
The dataset covers CBP, ICE, and CISA contacts plus application-access groups; Okta denies its systems were breached.
3
Okta Access Gateway before 2026.10.2 allows admin command execution
CVE-2026-115547 scores 9.1 but needs Admin Console access; Okta reports no active exploitation and no workaround.
1
Okta Access Gateway before 2026.10.2 allows admin command execution
CVE-2026-115547 is scored 9.1 but needs Admin Console privileges, and the advisory reports no known exploitation.
1
Node.js Brotli flaw allows crash or RCE (CVE-2026-111497)
Okta has patched production and is rolling the fix through Auth0, with no exploitation observed.
Okta and Auth0 are removing trust in eMudhra emSign ECC Root CA – G3
Derived keys for eight intermediates can mint certificates for any domain; Okta reports no exploitation.
Okta cloud unaffected by PHP2Shell; Access Gateway needs patch
Okta is still investigating CVE-2026-109618 and CVE-2026-109619, with on-prem remediation unfinished.
AI Used in 84% of Ransomware Attacks as Identity Infrastructure Comes Under Fire.
Semperis survey of 1,200 ransomware victims finds AI in 84% of incidents and identity systems widely targeted.
3
Half of Cybersecurity Pros Still Rely on Passwords Despite Security Concerns
Yubico and Okta found nearly half of security professionals still use passwords while AI-driven phishing rises.
Fake ChatGPT, Claude and Gemini Ads Use Browser-in-the-Browser Phishing to Steal Accounts
Phishers impersonate ChatGPT, Claude, and Gemini ad tools, using fake browser windows to steal passwords and MFA approvals.
4
12 Best Authentication-as-a-Service (AaaS) Providers Compared (2026): Features & Pricing
A 2026 comparison names Auth0 the leading authentication-as-a-service platform, with Entra External ID and Cognito as cheaper alternatives.
3
Top 10 Best Fine-Grained Authorization Tools in 2026 [Ranked & Scored]
A 2026 ranking puts Auth0 FGA, SpiceDB, and Permit.io atop fine-grained authorization tools.
9
11 Best CIAM Solutions Compared (2026): Features & Pricing
A 2026 buyer guide ranks Auth0 the best overall CIAM and Cognito plus Entra External ID the cheapest.
12 Best Passwordless Authentication Solutions Compared (2026): Features & Pricing
A 2026 roundup names Microsoft the best workforce passwordless start and HYPR the dedicated platform.
3
12 Best SSO Solutions Compared (2026): Features & Pricing
A 2026 comparison ranks 12 SSO platforms, favoring Microsoft Entra ID for Microsoft 365 and Okta for mixed SaaS.