Bad Packets by Okta

Threat actors love disabling security tools. What if you verified your security stack was running before granting access?

Okta Verify + osquery solve this with Advanced Posture Checks, turning every authentication flow into a security watchdog: bit.ly/45nOrde

🚨 Discount AI services promise suspiciously cheap tokens. In reality, they're backed by bots and fake accounts. Okta Threat Intelligence uncovered the scheme, profiled the signup fraud TTPs and took disruptive action. bit.ly/4yTiQ0x

🚨 Smishing campaign targeting hundreds of enterprises: fake "Benefits Portal" texts steal creds, MFA & session cookies, then establish persistence. Advisory & full IoCs for Okta customers: bit.ly/4bCE9cr Blog post for everyone: bit.ly/44uuG3g

Anyone reusing credentials on their Fortinet device? Asking for a friend on AS17511 (219.75.254[.]166) who keeps failing to get their password right.

We analyzed over 300,000 rows of the January 2026 BreachForums database leak to find their users' anonymizers of choice.

Join us in the cantina. 🧵