An Interest In:
Web News this Week
- April 25, 2024
- April 24, 2024
- April 23, 2024
- April 22, 2024
- April 21, 2024
- April 20, 2024
- April 19, 2024
Some of Our Sources
- Slashdot
- Mashable
- Techcrunch
- Simplebits
- Pearsonified
- Smashing Magazine
- Naldz Graphics
- CSS Tricks
- Daily Now
- The Verge
Help Webnuz
Referal links:
February 23, 2018 10:00 pm
Original Link: http://rss.slashdot.org/~r/Slashdot/slashdot/~3/Pv3cb6brcGI/critical-t-mobile-bug-allowed-hackers-to-hijack-users-accounts
'Critical' T-Mobile Bug Allowed Hackers To Hijack Users' Accounts
An anonymous reader quotes a report from Motherboard: The vulnerability was found and reported by a security researcher on December 19 of last year, but it hasn't been revealed until now. Within a day, T-Mobile classified it as "critical," patched the bug, and gave the researcher a $5,000 reward. That's good news, but it's unclear how long the site was vulnerable and whether any malicious hackers found and exploited the bug before it was fixed. The newly disclosed bug allowed hackers to log into T-Mobile's account website as any customer. "It's literally like logging into your account and then stepping away from the keyboard and letting the attacker sit down," Scott Helme, a security researcher who reviewed the bug report, told Motherboard in an online chat. Shortly after we published this story, a T-Mobile spokesperson sent us a statement: "This bug was confidentially reported through our Bug Bounty program in December and fixed within a matter of hours," the emailed statement read. "We found no evidence of customer information being compromised."Read more of this story at Slashdot.
Original Link: http://rss.slashdot.org/~r/Slashdot/slashdot/~3/Pv3cb6brcGI/critical-t-mobile-bug-allowed-hackers-to-hijack-users-accounts
Share this article:
Tweet
View Full Article
Slashdot
Slashdot was originally created in September of 1997 by Rob "CmdrTaco" Malda. Today it is owned by Geeknet, Inc..More About this Source Visit Slashdot