Security Stop Press : UK Government’s One Login Vulnerable to Undetected Attacks
A government-commissioned red teaming exercise has found that One Login, the UK’s flagship digital identity platform, can be compromised without triggering any alerts. The test, carried out by the National Cyber Security Centre’s Cross-Government Red Team, revealed serious gaps in the system’s ability to detect and respond to intrusions. One Login is intended to provide a single, secure sign-in…