Tumblr Patches A Flaw That Could Have Exposed Users' Account Info

Tumblr today published a report admitting the presence of a security vulnerability in its website that could have allowed hackers to steal login credentials and other private information for users' accounts. The affected information included users email addresses, protected hashed and salted...

Twitter: Circumventing the Twitter account lockout process [ACCOUNT TAKEOVER]

Ullger found a method to bypass our security control requiring compromised accounts to verify their details such as an email address & phone number. An attacker could have used this vulnerability with a stolen username & password in order to gain access to a user's account. In my testing, I found...