golden-saml
2 posts
Article
One write past the chunk, read-write on the repo
How a heap overflow primitive chains with an SSO misconfiguration to reach internal source repos, with MITRE ATT&CK mapping and telemetry gaps.
Article
Netherlands restricts DigiD to European operator
Dutch government restricts DigiD operation to a European vendor. Jurisdiction changes. The single-vendor identity concentration risk does not.