Microsoft’s October 2026 Patch Tuesday shipped fifteen CVEs affecting Active Directory Federation Services. Two arrived as direct spoofing vulnerabilities: CVE-2026-108131 (CVSS 7.5, Important, token ...
Conventional access control and detection mechanisms alone are no longer sufficient to protect enterprise Active Directory Federation Services (ADFS) environments against targeted attacks. With ...
After the threat actor behind the SolarWinds attack compromised the company's Orion network management product and leveraged it to break into target enterprise networks, the group often used a ...
The audit window closed today: the October security update remediates insecure DKM container ACLs in AD FS by default, and Microsoft's own opt-out documentation leads with a warning.
Some results have been hidden because they may be inaccessible to you
Show inaccessible results