Thycotic’s Nathan Wenzler had a following comment on the Yahoo Account Key announced this week. He was surprised this security flaw was not pointed out.
[su_note note_color=”#ffffcc” text_color=”#00000″]Nathan Wenzler, Executive Director of Security, Thycotic :
Yahoo Account Key might make life easier for consumers, but it also leaves them open to an entirely new type of attack. Hackers have access to millions of emails accounts from 2015’s data breaches alone. With Yahoo Account Key, hackers can just try logging into every Yahoo address they find, and wait. Eventually, some users will accidentally hit “yes” on their phones, and just like that, they’re in. Hackers only need a small percentage to make that mistake to make it worthwhile, similar to how they determine success rates for spam and emails that are sent in large volumes.[/su_note][su_box title=”About Nathan Wenzler” style=”noise” box_color=”#336588″]
The opinions expressed in this post belongs to the individual contributors and do not necessarily reflect the views of Information Security Buzz.