ThreatVectr
Tag

#SSO

4 stories taggedSSO.

A laptop screen showing a Lenovo account signup page with email verification bypass, connected to a Dropbox login session being initiated without proper authent
Identity & Access

Dropbox accounts hijacked after attacker abused a Lenovo signup flaw

A weakness in how Lenovo verified email addresses let an attacker create fake Lenovo IDs and walk straight into around 5,000 Dropbox accounts, no password needed.

4 min read
A Keycloak login interface on a screen with a password reset form, surrounded by visual indicators of vulnerability or security breach
Identity & Access

Critical Keycloak Bug Lets Anyone Reset Your Password and Log In as You

A 9.1-severity flaw in the popular open-source login server hands attackers full account takeover with no credentials required.

4 min read
A corporate office environment where a single login credential entry on a monitor suddenly grants access to multiple department folders and systems across the s
Identity & Access

SSO Is the New Skeleton Key. Criminals Have Noticed.

One stolen single sign-on password can hand attackers the run of a company. Here's how the break-ins work and what actually stops them.

4 min read
Illustration: two identical brass keys resting on a dark steel surface under a single overhead light
Identity & Access

n8n Login Bug Let a Valid Token From One Provider Log You In as Someone Else

The workflow automation platform matched users on a single ID field and ignored who issued the token. On Enterprise setups with more than one login provider, that was enough to walk in as another person.

3 min read
© 2026 Threat Vectr