article thumbnail

Twitter Fined $150 Million for Misuse of 2FA User Data

SecureWorld News

Federal Trade Commission (FTC) and the Department of Justice (DOJ) charged Twitter with a $150 million penalty for " deceptively using account security data for targeted advertising.". Twitter, like many other social media websites, asks users to provide their phone number and email address to better protect their account.

article thumbnail

It’s Still Easy for Anyone to Become You at Experian

Krebs on Security

I immediately suspected that Experian was still allowing anyone to recreate their credit file account using the same personal information but a different email address, a major authentication failure that was explored in last year’s story, Experian, You Have Some Explaining to Do. 9, 2022 and Dec.

article thumbnail

LastPass: ‘Horse Gone Barn Bolted’ is Strong Password

Krebs on Security

By 2013, new LastPass customers were given 5,000 iterations by default. Still, Palant and others impacted by the 2022 breach at LastPass say their account security settings were never forcibly upgraded. .” In February 2018, LastPass changed the default to 100,100 iterations.

Passwords 271