To make it easier for employees to access all their mission-critical applications in the cloud, many enterprises are turning to single sign-on solutions, the most popular of which is Microsoft (News - ...

If you’ve ever tried to develop an online solution that requires a login, you know it isn’t difficult to accomplish — as long as you handle the login ...

A newly discovered vulnerability in Microsoft Corp.’s Activity Directory Federation Services allows hackers to bypass multifactor authentication safeguards in a potentially serious threat to a ...

Microsoft has discovered a new malware used by the Russian hacker group APT29 (a.k.a. NOBELIUM, Cozy Bear) that enables authentication as anyone in a compromised network. As a state-sponsored ...

Security solutions firm FireEye on Tuesday described how Active Directory Federation Services (ADFS) could have been exploited to gain access to Microsoft 365 e-mails during the Nobelium ("Solorigate" ...

Conventional access control and detection mechanisms alone are no longer sufficient to protect enterprise Active Directory Federation Services (ADFS) environments against targeted attacks. With ...

A password spraying attack is a specialized password attack commonly used by attackers that is reasonably effective and helps avoid detection by traditional password defenses. Instead of trying many ...

The attackers responsible for the SolarWinds supply chain attack have added a new arrow to their quiver of misery: A post-compromise capability dubbed MagicWeb, which is used to maintain persistent ...

At its TechEd conference, Microsoft is pushing Active Directory Federation Services (ADFS) as the foundation for identity in cloud computing environments. At its TechEd conference this week, Microsoft ...

A sophisticated phishing campaign is targeting organizations that rely on Microsoft’s Active Directory Federation Services (ADFS), using spoofed login pages to harvest credentials and bypass ...