RSSAmplifier

Home | Ian McCloy Blog · Aug 22, 2025

👻 Ghost Login Attack

0
Sign in to vote or save

This site does not allow itself to be embedded. You can still read it on the original site — the toolbar below keeps your place in the directory.

What is a ghost login ? A is a legitimate authentication path that you forgot about or never noticed. Many SaaS apps allow several ways to sign in at the same time. Local username and password, social login, SAML / OIDC through your identity provider such as Okta and Entra ID. That combo is great for convenience and migration. It is also a perfect hiding spot. There are 2 main ways this occurs.…

Read on ianmccloy.com

Comments

Nothing yet. Say the first thing.

    Sign in to join the conversation.