SAML: A fractal of bad design
12 min
Brevo Supply Chain Attack Injects Malware Into 100,000 Websites
in the wild 2 min1
CISA and NIST Issue Guidance to Protect Cloud Identity Tokens
2 min1
NIST Issues New Guidance to Protect SSO and API Tokens From Theft and Forgery
2 sources 3 min
CISA and NIST Release Technical Checklist for Safeguarding Identity Tokens From Theft and Misuse
4 min1
USN-8770-1: SimpleSAMLphp vulnerabilities
1
Siemens Mendix SAML
4 min
Crypto customers targeted by scammers after email marketing provider breach
in the wild 3 min1
CVE-2026-56207: Apache Impala: SAML authentication bypass via forged bearer token
CVE-2026-86304: MojoX::Authentication versions before 0.006 for Perl allow SAML authentication bypass because parse_assertion builds Net::SAML2::Binding::POST without a trust anchor
AL26-019 - Vulnerabilities impacting Citrix NetScaler ADC and NetScaler Gateway - CVE-2026-19490 and CVE-2026-19489
[Control Systems] Siemens security advisory (AV26-881)
Jenkins Security Advisory 2026-09-02
1
Two CVSS 9.8 Auth Bypasses in miniOrange SAML WordPress Plugin Were Exploited Before Any Database Even Listed the Paid Editions as Vulnerable
in the wild 5 min
Attackers Target miniOrange SAML Flaws That Can Grant WordPress Admin Access
in the wild 2 min
One slug, seven editions: the miniOrange SAML SSO bug that let anyone log in as your WordPress admin
