Golden SAML: Newly Discovered Attack Technique Forges Authentication to Cloud Apps

CyberArk Labs is releasing a tool that implements the golden SAML attack shimit. The attack is basically a forged SAML authentication object and authenticate across every service that uses SAML 2.0 protocol as an SSO mechanism. In a golden SAML attack, attackers can gain access to any application that supports SAML authentication (e.g. Azure, AWS, vSphere, etc.) with any privileges they desire and be any user on the targeted application.”]

Source: https://www.cyberark.com/resources/threat-research-blog/golden-saml-newly-discovered-attack-technique-forges-authentication-to-cloud-apps