article thumbnail

Twitter Fined $150 Million for Misuse of 2FA User Data

SecureWorld News

Federal Trade Commission (FTC) and the Department of Justice (DOJ) charged Twitter with a $150 million penalty for " deceptively using account security data for targeted advertising.". Twitter, like many other social media websites, asks users to provide their phone number and email address to better protect their account.

article thumbnail

Hackers stole over $250,000 in Ethereum from Bored Ape Yacht Club

Security Affairs

The website was advertised through the official BAYC Discord for a Yuga Labs community manager that was previously hackerd. “CertiK analysis reveals that this community manager, account –@BorisVagner (“BorisVagner | SBS” on Discord)– posted a message to BAYC’s Discord server with a phishing link that led to the fake site. .

Phishing 133
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Hacker hijacked Orange Spain RIPE account causing internet outage to company customers

Security Affairs

RPKI adds a layer of security to BGP by cryptographically binding IP address prefixes to the entities that hold the legitimate right to advertise them. I have fixed your RIPE admin account security. If you suspect that your account might be impacted, please report it to security@ripe.net.”

Internet 111
article thumbnail

Hackers are actively exploiting a Zero-Day in WordPress ThemeREX Plugin to create Admin Accounts

Security Affairs

A new flaw was discovered in a WordPress plugin, this time experts found a zero-day vulnerability in the ThemeREX Addons to create admin accounts. Security experts from WordFence have discovered a zero-day vulnerability in the ThemeREX Addons that was actively exploited by hackers in the wild to create user accounts with admin permissions.

article thumbnail

Poloniex forces password reset following a data leak

Security Affairs

. “While almost all of the email addresses listed do not belong to Poloniex accounts, we are forcing a password reset on any email addresses that do have an account with us, including yours,” states the email. . Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. This is a real email!

article thumbnail

Multiple Fortnite flaws allowed experts to takeover players’ accounts

Security Affairs

Security researchers at Check Point have discovered several flaws in the popular game Fortnite that could be exploited to takeover gamers’account. Security experts at Check Point discovered several issues in the popular online battle game Fortnite. Facebook or Google) in turn, resends the authentication token.

article thumbnail

Hundreds of Instagram accounts were hijacked in a coordinated attack

Security Affairs

It’s not clear how hackers have hacked the Instagram accounts, there are some cases in which owner s of the accounts explained that they were using two-factor authentication (2FA). Woznicki says Instagram sent him security emails notifying him the email address on his account had been changed (once again, to a.ru