Investigating how the world’s largest software provider handles the security of its own ubiquitous products.| ProPublica
CyberArk Labs discovered a new attack vector, dubbed “golden SAML,” which allows an attacker to authenticate across every service that uses SAML 2.0 protocol as an SSO mechanism.| www.cyberark.com
Lucas Waldron is a graphics editor at ProPublica.| ProPublica
Microsoft is expanding the scope of the Secure Future Initiative (SFI) to adapt to the evolving cyberthreat landscape.| Microsoft Security Blog
Originally published Jan. 15, 2002 as an email to Microsoft employees worldwide.| Stories
Our commitment to protecting customers from vulnerabilities in our software, services, and devices includes providing security updates and guidance that address vulnerabilities when they are reported to Microsoft. We also want to be transparent with security researchers and our customers in our approach. This document helps to describe the criteria the Microsoft Security Response Center (MSRC) uses to determine whether a reported vulnerability affecting up-to-date and currently supported vers...| www.microsoft.com