NewsThe Register — Security
Legacy Lenovo login opens 5,000 Dropbox accounts to attackers
Teaser from the source
Cloud storage biz severs old integration and urges victims to reset credentials
This is the RSS-feed teaser. Read the full article at the original source.
Read at The Register — SecurityMore on accounts
Other advisories
- HighCVE-2026-123158Alpine Linux sshd password authentication bypass lets anyone log in to key-only accounts (CVE-2026-123158)
- CriticalCVE-2026-117691Keycloak SAML redirect-binding signature bypass lets attackers take over federated accounts (CVE-2026-117691)
- CriticalCVE-2026-121802Better Auth's Expo plugin let unauthenticated attackers take over accounts (CVE-2026-121802)
- Not ratedosv:CVE-2026-63115ActivityPub Undo handler can unfollow or remove reposts on behalf of other accounts
- Not ratedosv:CVE-2026-62967ZTNET privilege bypass: any user can deactivate arbitrary accounts via /api/auth/user/invalidateUser
- Not ratedosv:CVE-2026-116218Dolibarr ERP CRM 19.0.0 before 23.0.4 SQL Injection via bankaccounts API type field
- Not ratedosv:CVE-2026-114519Missing authorization in the Prospero Flow CRM user API allows a basic role user to read and delete other accounts
- Not ratedosv:CVE-2026-86008Mailu domain managers can take over higher-privileged accounts
Other news entries
- OpenSSH flaw lets attackers access password-disabled accounts on some Linux systemsNewsCSO Online
- Fake OpenAI, SpaceX events used to steal Microsoft, Google accountsNewsBleepingComputer
- OpenSSH flaw lets attackers log into password-disabled Linux accountsNewsBleepingComputer
- OpenSSH Issues Emergency Fix for Flaw Letting Long Passwords Bypass SSH Auth on Alpine LinuxNewsThe Hacker News
- Crédit Mutuel Arkéa confirms a cyberattack that enabled fraudulent transactionsBreachpwn.watch
- Harvard University data breach exposed info of 851,000 accountsNewsBleepingComputer
- Attackers Pose as IT Support on Microsoft Teams, Abuse AD CS to Steal Company DataNewsThe Hacker News
- Reddit to lock content behind logins to fight scrapersNewsBleepingComputer
ID