Security pros say teams running Okta Classics should take immediate action, checking their logs for exploitation.