Tag: single sign on
5 articles
Microsoft Update Disrupts NTLM Networking
Microsoft's latest update has shaken up NTLM networking, changing how Windows handles NTLMv1-derived Single Sign-On credentials and shifting the default behavior of the BlockNtlmSSO registry control. Network admins, take note: your security settings may need an urgent review.
Bromcom Breach Exposes Email Addresses in Legacy Sign-on Flaw
A major security flaw in Bromcom's legacy single sign-on system has led to a significant data breach, exposing email addresses of users across the UK's education sector. The incident, identified on September 6, affected a legacy registration mechanism still in use despite being superseded.
CISA and NIST Issue Guidance to Safeguard Cloud Identity Tokens
As cyber threats escalate, protecting cloud identity tokens has become crucial - and CISA and NIST have just released guidance to help safeguard these vulnerable targets. The new interagency report provides critical advice for federal agencies, cloud service providers, and organizations that rely on them to stay secure.
N0va Phishkit Targets Businesses with Legitimate Authentication Flows
Meet N0va, a sneaky phishkit that's duping businesses across North America and Europe by masquerading as trusted services and exploiting genuine authentication flows. Its clever attack chain can swiftly turn a single phishing click into persistent access to corporate resources.
SSO Security Requires Proactive Defense Against Credential Attacks
A single compromised SSO account can become a master key, unlocking a vast array of sensitive services and putting millions of individuals at risk, as seen in the 2025 University of Pennsylvania breach where 1.2 million people's data was stolen. Proactive defense against credential attacks is crucial to protecting your organization's security.