SAML assertion forgery: how the attack works and how to stop it
This article correctly identifies ADFS as a high-value target for SAML key compromise, but it underplays the risk of configuration drift; an organization that fails to strictly enforce the auditing steps—like enabling Event 1200 lo…
This article correctly identifies ADFS as a high-value target for SAML key compromise, but it underplays the risk of configuration drift; an organization that fails to strictly enforce the auditing steps—like enabling Event 1200 lo…
huntaegis.com
September 28, 2026 at 2:26 PM
SAML assertion forgery: how the attack works and how to stop it
This article correctly identifies ADFS as a high-value target for SAML key compromise, but it underplays the risk of configuration drift; an organization that fails to strictly enforce the auditing steps—like enabling Event 1200 lo…
This article correctly identifies ADFS as a high-value target for SAML key compromise, but it underplays the risk of configuration drift; an organization that fails to strictly enforce the auditing steps—like enabling Event 1200 lo…
Addressing the opioid epidemic requires coordination across sectors. Regulating pharmaceutical marketing or developing ADFs alone may cause spillovers, such as increased generic opioid prescribing. Insurers, regulators, and public health agencies must be part of a comprehensive response. #PADP8670
September 20, 2026 at 9:52 PM
Addressing the opioid epidemic requires coordination across sectors. Regulating pharmaceutical marketing or developing ADFs alone may cause spillovers, such as increased generic opioid prescribing. Insurers, regulators, and public health agencies must be part of a comprehensive response. #PADP8670
Hey, congrats. I did a stint in systems administration for a bit. What kind of work do they have you doing? I was handling email servers, cloud storage, the print server, file servers, AD, ADFS, SCCM, and probably other things I don't remember. 😅 It was a LOT, but kind of fun.
September 17, 2026 at 1:40 PM
Hey, congrats. I did a stint in systems administration for a bit. What kind of work do they have you doing? I was handling email servers, cloud storage, the print server, file servers, AD, ADFS, SCCM, and probably other things I don't remember. 😅 It was a LOT, but kind of fun.
📦 waterloobae/uw-adfs 1.7.3
University of Waterloo ADFS SAML authentication package for Laravel
🔗 https://github.com/waterloobae/uw-adfs
University of Waterloo ADFS SAML authentication package for Laravel
🔗 https://github.com/waterloobae/uw-adfs
September 10, 2026 at 2:59 PM
📦 waterloobae/uw-adfs 1.7.3
University of Waterloo ADFS SAML authentication package for Laravel
🔗 https://github.com/waterloobae/uw-adfs
University of Waterloo ADFS SAML authentication package for Laravel
🔗 https://github.com/waterloobae/uw-adfs
Outlook for iOS and Outlook for Android can now use AD FS Modern Authentication to access mailboxes in supported pure on-premises Exchange Server deployments.
techcommunity.microsoft.com/blog/exchang...
#MSExchange #ADFS #ModernAuth
techcommunity.microsoft.com/blog/exchang...
#MSExchange #ADFS #ModernAuth
Exchange Server AD FS Modern Authentication: Expanded Outlook client support | Microsoft Community Hub
Expanded Outlook client support for Exchange Server AD FS Modern Authentication is here!
techcommunity.microsoft.com
September 8, 2026 at 2:31 PM
Outlook for iOS and Outlook for Android can now use AD FS Modern Authentication to access mailboxes in supported pure on-premises Exchange Server deployments.
techcommunity.microsoft.com/blog/exchang...
#MSExchange #ADFS #ModernAuth
techcommunity.microsoft.com/blog/exchang...
#MSExchange #ADFS #ModernAuth
@syfuhs.net Is ADFS really going to be deprecated?
August 25, 2026 at 6:23 PM
@syfuhs.net Is ADFS really going to be deprecated?
Yeah that would be the dream. IDK why Entra makes it so manual. ADFS has an automatic certificate roll-over function for renewing signing certs so why the fuck doesn't Entra!?
August 21, 2026 at 7:11 PM
Yeah that would be the dream. IDK why Entra makes it so manual. ADFS has an automatic certificate roll-over function for renewing signing certs so why the fuck doesn't Entra!?
Si, pero en verano daban espacio a Mossos, Agents Rurals y Diba (porque organizaba la campaña de prevención de incendios de las ADFs) y yo era uno de los agentes de la Diba.
August 19, 2026 at 9:08 PM
Si, pero en verano daban espacio a Mossos, Agents Rurals y Diba (porque organizaba la campaña de prevención de incendios de las ADFs) y yo era uno de los agentes de la Diba.
RNZN Ship of the day – HMS/HMNZS Bellona (63)
HMS Bellona in 1943 HMS Bellona in 1943 HMS Bellona Gunnery firings HMNZS Tutira ex HMCS Loch Morlich re-fuelling from HMNZS Bellona in Tasman Sea, 1949 Aircraft from HMAS SYDNEY over NZ cruiser HMNZS BELLONA, Feb.-Mar. 1951 - ADFS.
HMS Bellona in 1943 HMS Bellona in 1943 HMS Bellona Gunnery firings HMNZS Tutira ex HMCS Loch Morlich re-fuelling from HMNZS Bellona in Tasman Sea, 1949 Aircraft from HMAS SYDNEY over NZ cruiser HMNZS BELLONA, Feb.-Mar. 1951 - ADFS.
RNZN Ship of the day – HMS/HMNZS Bellona (63)
HMS Bellona in 1943 HMS Bellona in 1943 HMS Bellona Gunnery firings HMNZS Tutira ex HMCS Loch Morlich re-fuelling from HMNZS Bellona in Tasman Sea, 1949 Aircraft from HMAS SYDNEY over NZ cruiser HMNZS BELLONA, Feb.-Mar. 1951 - ADFS.
rnzngunners.org
August 16, 2026 at 3:22 AM
RNZN Ship of the day – HMS/HMNZS Bellona (63)
HMS Bellona in 1943 HMS Bellona in 1943 HMS Bellona Gunnery firings HMNZS Tutira ex HMCS Loch Morlich re-fuelling from HMNZS Bellona in Tasman Sea, 1949 Aircraft from HMAS SYDNEY over NZ cruiser HMNZS BELLONA, Feb.-Mar. 1951 - ADFS.
HMS Bellona in 1943 HMS Bellona in 1943 HMS Bellona Gunnery firings HMNZS Tutira ex HMCS Loch Morlich re-fuelling from HMNZS Bellona in Tasman Sea, 1949 Aircraft from HMAS SYDNEY over NZ cruiser HMNZS BELLONA, Feb.-Mar. 1951 - ADFS.
CJS: spent the last three hours trying to get something to do SAML SSO with ADFS when it clearly doesn't support it. Amazingly we actually got it working. Which means that it isn now HELG!
August 14, 2026 at 8:32 AM
CJS: spent the last three hours trying to get something to do SAML SSO with ADFS when it clearly doesn't support it. Amazingly we actually got it working. Which means that it isn now HELG!
📦 simplesamlphp/simplesamlphp-module-adfs v3.0.6
A module that implements the WS-federation IDP
🔗 https://github.com/simplesamlphp/simplesamlphp-module-adfs
A module that implements the WS-federation IDP
🔗 https://github.com/simplesamlphp/simplesamlphp-module-adfs
August 11, 2026 at 12:09 PM
📦 simplesamlphp/simplesamlphp-module-adfs v3.0.6
A module that implements the WS-federation IDP
🔗 https://github.com/simplesamlphp/simplesamlphp-module-adfs
A module that implements the WS-federation IDP
🔗 https://github.com/simplesamlphp/simplesamlphp-module-adfs
TOSEC's "Amiga Applications" collection has ADFs that claim to be The Ultimate Soundtracker disks 1 and 2, but (at least the version I can find) the program disk contains "Soundtracker IV by DOC", a demoscene hacked version, so I don't think the sample disk is trustworthy either.
August 9, 2026 at 1:17 PM
TOSEC's "Amiga Applications" collection has ADFs that claim to be The Ultimate Soundtracker disks 1 and 2, but (at least the version I can find) the program disk contains "Soundtracker IV by DOC", a demoscene hacked version, so I don't think the sample disk is trustworthy either.
I'm here for it adfs;lkhakjadf though with his growly ass voice he can probably last a LONG TIME
August 8, 2026 at 10:24 PM
I'm here for it adfs;lkhakjadf though with his growly ass voice he can probably last a LONG TIME
This absolutely fucking idiotic AUKUS shit should’ve been killed in May of 2022. It wasn’t, and Herr Albanese kept it, the ADFs wet dream and fuck everyone else.
July 31, 2026 at 9:48 PM
This absolutely fucking idiotic AUKUS shit should’ve been killed in May of 2022. It wasn’t, and Herr Albanese kept it, the ADFs wet dream and fuck everyone else.
I made a short seven minute clip explaining Entra's staged rollout feature.
If you are looking to move off ADFS or another identity provider to Entra ID this covers most of what you need to know to go about movin…
🔁 RT @merill | reposted by @_subTee
https://x.com/merill/status/2079857377122439516
If you are looking to move off ADFS or another identity provider to Entra ID this covers most of what you need to know to go about movin…
🔁 RT @merill | reposted by @_subTee
https://x.com/merill/status/2079857377122439516
July 22, 2026 at 7:07 PM
I made a short seven minute clip explaining Entra's staged rollout feature.
If you are looking to move off ADFS or another identity provider to Entra ID this covers most of what you need to know to go about movin…
🔁 RT @merill | reposted by @_subTee
https://x.com/merill/status/2079857377122439516
If you are looking to move off ADFS or another identity provider to Entra ID this covers most of what you need to know to go about movin…
🔁 RT @merill | reposted by @_subTee
https://x.com/merill/status/2079857377122439516
KI-Assistenten und programmierbare Tastaturen automatisieren Excel-Aufgaben. Sicherheitsupdates und neue Tools begleiten den Wandel.
Microsoft Patchday Juli: 570-722 Sicherheitslücken in SharePoint und ADFS
borncity.com
July 18, 2026 at 9:37 PM
KI-Assistenten und programmierbare Tastaturen automatisieren Excel-Aufgaben. Sicherheitsupdates und neue Tools begleiten den Wandel.
tbf if we reformed scotus they would cease writing the ADFs latest segregationist lawslop into the legal bedrock, so i can see why that would be distressing for him
July 17, 2026 at 5:25 PM
tbf if we reformed scotus they would cease writing the ADFs latest segregationist lawslop into the legal bedrock, so i can see why that would be distressing for him
Active exploitation of CVE-2026-56155 in Microsoft ADFS puts your identity perimeter at risk. Our latest TSUITE brief delivers the forensic indicators, detection queries, and compensating controls needed to neutralize this privilege escalation threat. Secure your architecture today.…
(CISA TS-MAN) The Cyber Mind TSUITE Brief: CVE-2026-56155 – Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability
Facing active exploitation of CVE-2026-56155? Access our high-authority TSUITE brief for ADFS privilege escalation detection, forensic indicators, and critical hardening steps to protect your identity infrastructure.
thecybermind.co
July 17, 2026 at 3:05 PM
Active exploitation of CVE-2026-56155 in Microsoft ADFS puts your identity perimeter at risk. Our latest TSUITE brief delivers the forensic indicators, detection queries, and compensating controls needed to neutralize this privilege escalation threat. Secure your architecture today.…
Microsoft Patches a Record 570 Flaws, Two Zero-Days Already Under Attack: Microsoft fixed a record 570 vulnerabilities in July 2026, including two actively exploited zero-days in SharePoint and ADFS, plus a BitLocker bypass.
Microsoft Patches a Record 570 Flaws, Two Zero-Days Already Under Attack
Microsoft fixed a record 570 vulnerabilities in July 2026, including two actively exploited zero-days in SharePoint and ADFS, plus a BitLocker bypass.
www.russianhackers.co
July 16, 2026 at 11:23 PM
Microsoft Patches a Record 570 Flaws, Two Zero-Days Already Under Attack: Microsoft fixed a record 570 vulnerabilities in July 2026, including two actively exploited zero-days in SharePoint and ADFS, plus a BitLocker bypass.
Attackers can exploit 'Ghost Certificates' in ADFS to forge high-privilege SAML tokens, bypassing MFA. Learn how to defend against this stealthy threat. 👻🔒 #CyberSecurity #ADFS #ThreatDetection
Recovering Active ADFS Signing Keys via Machine DPAPI | Google Cloud Blog
This post details how adversaries exploit this TTP to forge high-privilege SAML tokens and provide the blueprint to defend against it.
cloud.google.com
July 16, 2026 at 6:39 AM
Attackers can exploit 'Ghost Certificates' in ADFS to forge high-privilege SAML tokens, bypassing MFA. Learn how to defend against this stealthy threat. 👻🔒 #CyberSecurity #ADFS #ThreatDetection
#BrainUp daily tech news, Big day for tech, trust, and transformation: @Microsoft tackles a record 622 #CVEs, including active #ZeroDay threats across #SharePoint and #ADFS, pu new post 👉🏻 https://salhi.com/2026/07/15/brainup-daily-tech-news20260715-5/
July 15, 2026 at 7:41 PM
#BrainUp daily tech news, Big day for tech, trust, and transformation: @Microsoft tackles a record 622 #CVEs, including active #ZeroDay threats across #SharePoint and #ADFS, pu new post 👉🏻 https://salhi.com/2026/07/15/brainup-daily-tech-news20260715-5/