News Cisco says critical Webex Services flaw requires customer action
Cisco has released security updates to patch four critical vulnerabilities, including a fixed improper certificate valid...
SSO
News 
News Crunchyroll probes breach after hacker claims to steal 6.8M users’ data
Popular anime streaming platform Crunchyroll is investigating a breach after hackers claimed to have stolen personal inf...
News Fortinet blocks exploited FortiCloud SSO zero day until patch is ready
Fortinet has confirmed a new, actively exploited critical FortiCloud single sign-on (SSO) authentication bypass vulnerab...
News ShinyHunters claim hacks of Okta, Microsoft SSO accounts for data theft
The ShinyHunters extortion gang claims it is behind a wave of ongoing voice phishing attacks targeting single sign-on (S...
News Fortinet confirms critical FortiCloud auth bypass not fully patched
Days after admins began reporting that their fully patched firewalls are being hacked, Fortinet confirmed it's working t...
News Okta SSO accounts targeted in vishing-based data theft attacks
Okta is warning about custom phishing kits built specifically for voice-based social engineering (vishing) attacks. has ...
News Hackers breach Fortinet FortiGate devices, steal firewall configs
Fortinet FortiGate devices are being targeted in automated attacks that create rogue accounts and steal firewall configu...
News Critical Samlify SSO flaw lets attackers log in as admin
A critical Samlify authentication bypass vulnerability has been discovered that allows attackers to impersonate admin us...
News オラクル、ハッカーによる600万件のデータ盗難を否定
オラクルは、同社のOracle Cloud連携SSOログイン・サーバーから盗まれたとされる600万件のデータ・レコードを販売していると主張する脅威行為者について、侵害を否定した。 「Oracle Cloudに侵入された事実はない。公開された...
News GitHub、Enterprise ServerにおけるSAML認証バイパスの欠陥を警告
GitHub は、SAML シングルサインオン (SSO) 認証を使用している GitHub Enterprise Server (GHES) インスタンスに影響する、CVE-2024-4985 として追跡されている最大深刻度 (CVSS ...