OKTA CROSS-TENANT IMPERSONATION: PREVENTION AND DETECTION

Summary from the TLDR InfoSec newsletter

Threat actors are using social engineering to convince IT desk personnel to reset multifactor authentication (MFA) for highly privileged Okta enterprise accounts, gaining access to the cloud-based identity access management (IAM) service and moving laterally through targeted networks from there. Okta warns about how common this threat is and how to prevent it.