CANVA AMONG ~100 TARGETS OF SHINYHUNTERS OKTA IDENTITY-THEFT CAMPAIGN

Summary from the TLDR InfoSec newsletter

ShinyHunters is running an Okta single sign-on credential-stealing campaign against roughly 100 high-value organizations, including Canva, Atlassian, RingCentral, and others. The group uses evolved voice phishing to capture SSO logins, enroll its own devices in MFA, pivot into SaaS apps, exfiltrate data, and then extort victims. There is no confirmation of which named firms were successfully breached.