OneLogin, Many Issues: How I Pivoted from a Trial Tenant to Compromising Customer Signing Keys

Published

2025-06-10 18:58

Collected

2026-10-17 05:52

---
id: 9532
title: "OneLogin, Many Issues: How I Pivoted from a Trial Tenant to Compromising Customer Signing Keys"
source_domain: specterops.io
source_url: "https://specterops.io/blog/2025/06/10/onelogin-many-issues-how-i-pivoted-from-a-trial-tenant-to-compromising-customer-signing-keys/"
published_at: "2025-06-10T18:58:15Z"
phying_url: "https://phying.com/item/9532"
lang: en
---

# OneLogin, Many Issues: How I Pivoted from a Trial Tenant to Compromising Customer Signing Keys

## Summary

Critical vulnerabilities in OneLogin's AD Connector leaked authentication credentials, enabling account impersonation.

## Intelligence Metadata

- **Sources:** specterops.io
- **Published:** 2025-06-10T18:58:15Z
- **Original:** https://specterops.io/blog/2025/06/10/onelogin-many-issues-how-i-pivoted-from-a-trial-tenant-to-compromising-customer-signing-keys/
- **Phying News:** https://phying.com/item/9532