DropBox has been 0wn3d

The penetration of all user accounts and employee accounts in the cloud storage service Dropbox, the service contained a security vulnerability in last June allowed unauthorized users access to the accounts of subscribers to the service without having to enter the password healthThe company learned of the existence of a breakthrough in service after receiving reports from users indicate that they are receiving messages defraud the e-mail you use it only for the service Dropbox, in addition to exposure of employees to this same problem, the company said that it had been to use a password stolen to gain access to your e-mail one of the staff and that it contains documents that contain email addresses of users, the company believes that the breach of an employee that is why the fraudulent messages received by users, the company also said: We regret this matter and we have put additional controls to ensure no repeat of this command again
Additional controls that I talked about the company include the use of two factors for authentication, which allows the user to set two conditions to confirm identity before logging on to an account, as a symbol of a temporary is sent to the mobile phone in addition to the password, also plans to Dropbox add new mechanisms to detect any suspicious activity as well Page to provide details of all user logins to his account

0 commentaires:

Enregistrer un commentaire