Single Sign-On

Health-ISAC warns of rising ShinyHunters data theft attacks on healthcare News

Health-ISAC warns of rising ShinyHunters data theft attacks on healthcare

Health-ISAC, a cybersecurity information-sharing organization for the health sector, is warning healthcare and medical t...
Is Your SSO Protected Against Modern Credential Attacks? News

Is Your SSO Protected Against Modern Credential Attacks?

Single sign on (SSO) simplifies access by letting users log into multiple systems with one set of credentials. While thi...
ADT confirms data breach after ShinyHunters leak threat News

ADT confirms data breach after ShinyHunters leak threat

Home security giant ADT has confirmed a data breach after the ShinyHunters extortion group threatened to leak stolen dat...
Cisco says critical Webex Services flaw requires customer action News

Cisco says critical Webex Services flaw requires customer action

Cisco has released security updates to patch four critical vulnerabilities, including a fixed improper certificate valid...
Mandiant details how ShinyHunters abuse SSO to steal cloud data News

Mandiant details how ShinyHunters abuse SSO to steal cloud data

Mandiant says a wave of recent ShinyHunters SaaS data-theft attacks is being fueled by targeted voice phishing (vishing)...
Fortinet confirms critical FortiCloud auth bypass not fully patched News

Fortinet confirms critical FortiCloud auth bypass not fully patched

Days after admins began reporting that their fully patched firewalls are being hacked, Fortinet confirmed it's working t...
Okta SSO accounts targeted in vishing-based data theft attacks News

Okta SSO accounts targeted in vishing-based data theft attacks

Okta is warning about custom phishing kits built specifically for voice-based social engineering (vishing) attacks. has ...
Hackers breach Fortinet FortiGate devices, steal firewall configs News

Hackers breach Fortinet FortiGate devices, steal firewall configs

Fortinet FortiGate devices are being targeted in automated attacks that create rogue accounts and steal firewall configu...
Duo の継続的な停止により Azure Auth 認証エラーが発生する news

Duo の継続的な停止により Azure Auth 認証エラーが発生する

シスコ所有の多要素認証(MFA)プロバイダーである Duo Security は、3 時間前から認証の失敗やエラーを引き起こし続けている継続的な停止を調査しています。 この機能停止により、複数の Duo サーバー間でコア認証サービスの問題も...
マルウェアがエンジニアの 2FA に基づくセッションを盗んだことによる CircleCI のハッキング news

マルウェアがエンジニアの 2FA に基づくセッションを盗んだことによる CircleCI のハッキング

エンジニアが情報を盗むマルウェアに感染した後、12 月にハッカーが CircleCi に侵入し、2FA でサポートされた SSO セッション Cookie が会社の内部システムへのアクセスを可能にしました。 今月初め、CircleCi はセ...