Behind the Breach: Cross-tenant Impersonation in Okta

In recent investigations, the Obsidian Threat Research team has observed multiple instances of cross-tenant impersonation used to establish persistence and escalate user privileges within Okta environments. This technique poses a significant risk to organizations that rely on Okta for identity management, as it allows attackers to access and impersonate any legitimate user, accessing critical systems […]

The post Behind the Breach: Cross-tenant Impersonation in Okta appeared first on Obsidian Security.

The post Behind the Breach: Cross-tenant Impersonation in Okta …

access attackers breach environments featured identity identity management impersonation investigations management obsidian okta organizations persistence privileges research risk security advisories team threat threat research