Sign in as anyone: Bypassing SAML SSO authentication with parser differentials(github.blog)282 points by campuscodi 1 year ago | 111 comments
Non-interactive SSH password authentication(vincent.bernat.ch)251 points by jandeboevrie 2 years ago | 102 comments
Passwordless: a different kind of hell?(jcarlosroldan.com)159 points by juancroldan 2 years ago | 276 comments
Hackers stole access tokens from Okta's support unit(krebsonsecurity.com)279 points by todsacerdoti 3 years ago | 137 comments