Almost half a million Yahoo user accounts were compromised in a recent exploit. If you’re a current Yahoo service user or have an old account with a shared password on it, now’s the time to change it.
Ars Technica reports on the breech:
The dump, posted on a public website by a hacking collective known as D33Ds Company, said it penetrated the Yahoo subdomain using what’s known as a union-based SQL injection. The hacking technique preys on poorly secured web applications that don’t properly scrutinize text entered into search boxes and other user input fields. By injecting powerful database commands into them, attackers can trick back-end servers into dumping huge amounts of sensitive information.
To support their claim, the hackers posted what they said were the plaintext credentials for 453,492 Yahoo accounts, more than 2,700 database table or column names, and 298 MySQL variables, all of which they claim to have obtained in the exploit.
Remember to change your passwords today and protect your Emails and account information.
No comments:
Post a Comment