● Developing Vulnerabilities
Okta patches critical Access Gateway flaw allowing system command execution
The vulnerability allows authenticated administrators to execute commands; CISA reports no active exploitation as of Oct. 23.
Identity provider incidents
Breaches and flaws at the services that sign people in.
Understand the story
Follow this story through dated reporting and the underlying records. Evidence labels distinguish documented findings, attributed reporting, disputed accounts and claims that remain unverified. Start with the background reports below, then read the latest developments.