4 Okta customers hit by campaign that gave attackers super admin control
Attackers already had credentials. Now, they just needed to bypass 2FA protections.
David Bradbury Identity Provider Super Administrator Org Administrator Custom Admin Role Super Administrators
Source: arstechnica.com