资讯
Dropbox breach seemingly caused by egregious authentication failure [U]
📌 概要
Dropbox向部分用户发出安全通知，称其账户遭遇未授权访问。公司证实约5000个账户被入侵，其中约1500个账户的文件被下载。事故根源疑似是严重的身份验证失误，暴露出认证机制的漏洞。
⚡ 关键要点
- ▸Dropbox确认发生安全漏洞，已通知受影响用户
- ▸约5000个账户被入侵，约1500个账户文件被下载
- ▸事故根源疑似为严重的身份验证失败
Multiple Dropbox users have been emailed by the cloud storage company to advise them that a security breach saw unauthorised access to their account. Update: the company has said that about 5,000 accounts were compromised, with files downloaded from around 1,500 of them.
The root cause appears to be a lack of authentication by Dropbox when attackers created a single sign-on option through a third-party company …
more…