🛡️ Security

Golden SAML

An attack in which an adversary who has obtained the signing key or credentials of an identity provider forges valid SAML authentication tokens for any user, including administrators. Because the tokens are correctly signed, downstream services trust them without a further password check.

📚 Deep Dive

Learn Article

Why Compromising vCenter Hands Over Every VM It Manages

One bug in a management appliance ended with ransomware on every workload. The cause is not a chain of exploits but the trust model that makes vCenter useful: root on the appliance is authority over the estate.

intermediate 5 min read

Back to Glossary