Yahoo reveals its third security breach in just six months

What of Yahoo! It has no name, or perhaps it does: irresponsibility, insecurity, concealment ... All of this, of course, under the qualification of "supposedly" because in these times, everything is "supposedly" no matter how much the evidence is slapping us over and over again. again.

Continuing with what seems to have become a custom, the company Yahoo recently revealed that some 32 million accounts have been accessed by intruders over the past two years.. And apparently, these accounts must be added to the accounts already affected by the two security flaws that the company had previously announced.

Another 32 million Yahoo email accounts have been exposed in recent years

If you have an email account with Yahoo, it is best to get rid of it. Or maybe it's too late and your darkest secrets, or your private data, have become known to who knows who. This is probably something you never know, and maybe it's better to find out in other ways.

Email from Yahoo has had serious, very serious security problems for the past few years. This is not something new, but it is surprising that every so often the company announces new bugs that are not so new. Y there are already three ads in just six months.

Yahoo just revealed that around 32 million email accounts have been exposeds, and have even been visited by intruders, in the last two years. This figure must be added to the number of accounts exposed in the two previous announcements of security flaws made by the company.

According to published Reuters, accounts were compromised using cookies. Yahoo is convinced that The person who accessed these accounts is the "same state-sponsored actor responsible for the 2014 hack."

For those who do not know what happened in 2014, or have forgotten it, that hack affected at least 500 million accounts, but the company did not recognized be aware of this very serious problem until just four months ago, something that perhaps would not have been known had it not been for the attempts of a hacker who was trying to sell all the information obtained (email addresses, telephone numbers, dates birthdays, password reminders, security questions and their answers ...) through the Deep Web, for just over $ 2.000.

"Based on the investigation, we believe that an unauthorized third party accessed the company's proprietary code to learn how to forge certain cookies," Yahoo said in its latest annual statement.

In order to try to fix this security problem, Yahoo claims that it has invalidated these cookies so that they can no longer be used to access user accounts..

Marissa runs out of bonus

Additionally, Yahoo has announced that will not concede to Marissa Mayer, the executive director, the cash bonus for 2016 due to the findings of an independent committee investigation into the 2014 security issues. Mayer herself has already offered to decline any additional benefits in 2017 due to these data breaches.

A short but intense track record of security issues

Security, or rather Yahoo's security concerns, have been on the front page for a long time. In September of last year, Yahoo confirmed that 500 million user accounts had been hacked by the end of 2014. And if that wasn't enough, in December he announced that another 2013 billion accounts were exposed in XNUMX.

This triple recognition of security breaches occurs in the process of acquiring Yahoo by Verizon, company that has already lowered the purchase price by 350 million dollars due precisely to these problems. The deal is expected to close during the second quarter of this year, although Verizon has already warned that data breaches may delay "Yahoo's integration with Verizon after closing." What's more, there is still time for more past gaps to emerge


Follow us on Google News

Leave a Comment

Your email address will not be published. Required fields are marked with *

*

*

  1. Responsible for the data: AB Internet Networks 2008 SL
  2. Purpose of the data: Control SPAM, comment management.
  3. Legitimation: Your consent
  4. Communication of the data: The data will not be communicated to third parties except by legal obligation.
  5. Data storage: Database hosted by Occentus Networks (EU)
  6. Rights: At any time you can limit, recover and delete your information.