<h1><span style="font-size:11.0pt"><span style="font-family:"Calibri",sans-serif">In this blog post, we introduce a new attack vector discovered by CyberArk Labs and dubbed “golden SAML.” The vector enables an attacker to create a golden SAML, which is basically a forged SAML “authentication object,”<em> </em>and authenticate across every service that uses SAML 2.0 protocol as an SSO mechanism. </span></span></h1>

22 November 20171 min read0 views

f 𝕏 in

In this blog post, we introduce a new attack vector discovered by CyberArk Labs and dubbed “golden SAML.” The vector enables an attacker to create a golden SAML, which is basically a forged SAML “authentication object,” and authenticate across every service that uses SAML 2.0 protocol as an SSO mechanism.

DOWNLOAD PDF HERE

Keep reading

Golden SAML: Newly Discovered Attack Technique Forges Authentication to Cloud Apps

Related stories

Matters.AI and Cockroach Labs Launch In-Environment Data Security for Distributed SQL, Mapping DPDP-Regulated Data to Every Database Role That Can Reach It

BEL-C-DAC Sovereign Stack Opens Door for Deepfake Defence

Innovation that Drives Inclusion Nabard Ruraltech Innovation Hub

Zoho powers enterprise operations and data transformation at Motilal Oswal Financial Services