Somebody registered a Lenovo ID using a stranger’s email address and then used it to sign into that person’s Dropbox account without needing their password. About 5,000 accounts were compromised between August 4 and 21, Dropbox said. The flaw was in a legacy integration between Lenovo ID and Dropbox that did not properly verify email […]
This story continues at The Next WebRead More