article thumbnail

Twitter Fined $150 Million for Misuse of 2FA User Data

SecureWorld News

Federal Trade Commission (FTC) and the Department of Justice (DOJ) charged Twitter with a $150 million penalty for " deceptively using account security data for targeted advertising.". Twitter, like many other social media websites, asks users to provide their phone number and email address to better protect their account.

article thumbnail

Hackers are actively exploiting a Zero-Day in WordPress ThemeREX Plugin to create Admin Accounts

Security Affairs

A new flaw was discovered in a WordPress plugin, this time experts found a zero-day vulnerability in the ThemeREX Addons to create admin accounts. Security experts from WordFence have discovered a zero-day vulnerability in the ThemeREX Addons that was actively exploited by hackers in the wild to create user accounts with admin permissions.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Poloniex forces password reset following a data leak

Security Affairs

. “While almost all of the email addresses listed do not belong to Poloniex accounts, we are forcing a password reset on any email addresses that do have an account with us, including yours,” states the email. . Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. This is a real email!

article thumbnail

Multiple Fortnite flaws allowed experts to takeover players’ accounts

Security Affairs

Security researchers at Check Point have discovered several flaws in the popular game Fortnite that could be exploited to takeover gamers’account. Security experts at Check Point discovered several issues in the popular online battle game Fortnite. Facebook or Google) in turn, resends the authentication token.

article thumbnail

Hundreds of Instagram accounts were hijacked in a coordinated attack

Security Affairs

It’s not clear how hackers have hacked the Instagram accounts, there are some cases in which owner s of the accounts explained that they were using two-factor authentication (2FA). Woznicki says Instagram sent him security emails notifying him the email address on his account had been changed (once again, to a.ru

article thumbnail

It’s Still Easy for Anyone to Become You at Experian

Krebs on Security

I immediately suspected that Experian was still allowing anyone to recreate their credit file account using the same personal information but a different email address, a major authentication failure that was explored in last year’s story, Experian, You Have Some Explaining to Do. 9, 2022 and Dec.

article thumbnail

Twitter announces measures to protect accounts of people involved in 2020 Presidential election

Security Affairs

. “As we learn from the experience of past security incidents and implement changes, we’re also focused on keeping high-profile accounts on Twitter safe and secure during the 2020 US election.” The company will implement better defenses against account takeover and expedited account recovery support. .”