Dropbox breach seemingly caused by egregious authentication failure [U]
Multiple Dropbox users have been emailed by the cloud storage company to advise them that a security breach saw unauthorised access to their account. Update: the company has said that about 5,000 accounts were compromised, with files downloaded from around 1,500 of them. The root cause appears to be...
Multiple Dropbox users have been emailed by the cloud storage company to advise them that a security breach saw unauthorised access to their account. Update: the company has said that about 5,000 accounts were compromised, with files downloaded from around 1,500 of them.
The root cause appears to be a lack of authentication by Dropbox when attackers created a single sign-on option through a third-party company …
more…