Hackers Bypass Phishing Emails and Target Okta Identity Systems Instead

Cybersecuritynews •Tushar Subhra Dutta • April 14, 2026

Cybercriminals are changing the way they break into organizations. Instead of sending malicious emails and waiting for someone to click a link, attackers are now picking up the phone and calling their way into corporate systems. This shift is one of the most significant changes in how initial access attacks work today, and it is […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Hackers Target Okta with Voice-Based Social Engineering Attacks Cybercriminals are increasingly bypassing traditional phishing methods to directly target identity providers like Okta through voice-based social engineering, referred to as 'Okta vishing.' This method allows attackers to gain immediate access to organizational systems via Single Sign-On (SSO), potentially leading to widespread data breaches. The shift from email phishing to direct phone calls marks a significant evolution in initial access tactics. Organizations relying on Okta for identity management are particularly vulnerable, as a single compromised account can result in an organization-wide breach. This trend highlights the need for enhanced security measures and awareness training for employees. Current reports indicate that this tactic is gaining traction among cybercriminals, raising alarms in the cybersecurity community. The situation is evolving, and organizations are urged to reassess their security protocols to mitigate these risks. 3 sources 68

Extracted Entities

Hackers Bypass Phishing Emails and Target Okta Identity Systems Instead

The full story

Extracted Entities

Attack Types (1)

MITRE ATT&CK (2)

Platforms (1)