Adversary exploits weakness in identity systems allowing generation of rogue credentials or digital certificates used to masquerade or impersonate users or system services