News for hackers. Stuff that matters.

A comment on Hackers breached Colonial Pipeline using compromised password. Parent comment

Re:Hackers breached Colonial Pipeline using compromised pass... by ed25519FUUU on Friday June 04, 2021 @11:26PM (#27401848)
Invalidating credentials should be a one-stop-shop action. There shouldn’t be “invalidate their email, invalidate their VPN, invalidate their corporate login...”
[ Parent | on HN ]
Re:Hackers breached Colonial Pipeline using compromised pass... by gabereiser on Friday June 04, 2021 @11:59PM (#27402040)
Exactly. If everything is based on SAML SSO this is easy. If you manage multiple user databases for access control it’s a bit harder.
[ Parent | on HN ]