SAML — Cyber Threats, Attacks & Incidents

Threat entity extracted from intelligence sources

Frequency
5
occurrences
First Seen
November 24, 2025
Last Seen
July 24, 2026

SAML is a technology platform tracked across 6 threat clusters and 5 intelligence report mentions on ThreatCluster. First observed November 24, 2025; most recent activity July 24, 2026.

Related Threat Clusters

  • Critical Grafana SCIM Vulnerability Allows Privilege Escalation

    Grafana Labs has issued critical patches for a severe vulnerability, CVE-2025-41115, affecting Grafana Enterprise versions 12.0.0 to 12.2.1. The flaw in the SCIM provisioning feature could enable attackers to escalate…

    6 articles · Updated November 24, 2025
  • Critical Grafana SCIM Vulnerability Allows Privilege Escalation

    Grafana Labs has issued critical patches for a severe vulnerability (CVE-2025-41115) in its SCIM provisioning feature, which could enable attackers to escalate privileges or impersonate users. The flaw affects Grafana…

    6 articles · Updated November 21, 2025
  • Evolving MFA Strategies Address Modern Cyber Threats in 2026

    In 2026, multi-factor authentication (MFA) is essential for organizations to prevent account compromise. While MFA is widely adopted, attackers have developed sophisticated techniques to bypass traditional methods.…

    8 articles · Updated July 9, 2026
  • Federation Outages Impacting Single Sign-On Systems

    Federation outages can lead to abrupt authentication failures, locking users out of applications relying on SAML and OAuth protocols. When identity providers (IdPs) fail, users lose access to all federated applications…

    2 articles · Updated July 24, 2026
  • Critical Vulnerabilities Found in Fortinet Products

    The Canadian Centre for Cyber Security has issued an alert regarding critical vulnerabilities affecting Fortinet products, specifically related to FortiCloud SSO Login Authentication Bypass. These vulnerabilities may…

    1 article · Updated December 16, 2025
  • NewCore Secures $66M to Address AI Agent Identity Management Challenges

    NewCore, a cybersecurity startup, has emerged from stealth with $66 million in funding to develop a security-first identity platform tailored for enterprises integrating AI agents. The funding round was led by…

    2 articles · Updated June 15, 2026

Recent Intelligence Reports

  • Federation and Single Sign-On: How SSO Works and When It Breaks — Feeds.Feedburner · July 24, 2026
  • Where Organizations Fall Short with MFA — Infosecurity-Magazine · July 7, 2026
  • NewCore has emerged from stealth with $66 million in funding — newcore.com · June 15, 2026
  • AL25-019 - Vulnerabilities impacting Fortinet products — Cyber.Gc.Ca · December 16, 2025
  • Grafana Flags Maximum — Thecyberexpress · November 24, 2025

CVSS v3.1 Breakdown