The cybercriminal group ShinyHunters is targeting around 100 organizations in a campaign aimed at stealing Okta single sign-on credentials. Companies like Atlassian and Canva are included among the targets, with reports of successful breaches at Crunchbase and Betterment. Experts recommend stronger multi-factor authentication measures to combat these threats.

Match Group confirmed a data breach affecting users of its dating services, including Hinge and OkCupid. Hackers accessed a limited amount of user data after compromising an Okta account, but there's no evidence of stolen login credentials or financial information. The company is investigating the incident and notifying affected individuals.

OktaGinx is a phishlet designed for Evilginx that enables the bypassing of Okta authentication when used in conjunction with Azure. It incorporates techniques to evade framebusters, enhancing its phishing capabilities.