Dropbox accounts breached through Lenovo email verification flaw
Teaser from the source
Dropbox is warning some users that an unauthorized party accessed their accounts by exploiting a flaw in Lenovo's email verification process to register fraudulent Lenovo IDs. [...]
This is the RSS-feed teaser. Read the full article at the original source.
Read at BleepingComputerMore on verification
Other advisories
- Not ratedosv:CLEANSTART-2025-AA04470TLS session reuse can lead to host certificate verification bypass in node version < 12
- Not ratedosv:CLEANSTART-2024-VK48127security vulnerability has been identified in all supported versions of OpenSSL related to the verification of X
- Not ratedosv:CLEANSTART-2026-ND18378Certificate verification can panic when a certificate in the chain has an empty DNS name and another certificate in the chain has excluded name constraints
- Not ratedosv:CLEANSTART-2026-RT55512Heap-based buffer overflow in the CRC32 verification in Info-ZIP UnZip 6
- Not ratedosv:CLEANSTART-2026-TC39210Hostname verification in Apache ZooKeeper ZKTrustManager falls back to reverse DNS (PTR) when IP SAN validation fails, allowing attackers who control or spoof PTR records to impersonate ZooKeeper s...
- Not ratedosv:CLEANSTART-2026-KN02152sigstore-go is a Go library for Sigstore signing and verification
- Not ratedosv:CLEANSTART-2026-SG16425Java Key Vault Keys library in the Azure SDK for Java contains an issue in the local cryptographic verification path where authentication tag comparison was implemented incorrectly
- Not ratedosv:CLEANSTART-2026-ZI40106Authorization handling for component configuration verification requests in Apache NiFi 1
Other news entries
- SS7 and Diameter Attacks: How Signaling Flaws Expose Your PhoneNewsBleepingComputer
- Keystone to Destroy 18,835 Hardware Wallets After Hackers Steal Device Verification KeyNewsThe Hacker News
- You gave your AI agent access, but who is giving it orders?NewsBleepingComputer
- Inside the Underground Market for Know Your Client ServicesNewsBleepingComputer
- How to Run a Deepfake Readiness Drill Before a Cloned Voice Calls Your TeamNewsThe Hacker News
- Anthropic widens access to AI cyber capabilities for vetted security teamsNewsCSO Online
- Anthropic Introduces 3-Tier Cyber Verification Program for AI AccessNewsSecurityWeek
- Anthropic reconfigures its cool kids security programNewsThe Register — Security
ID