Hackers highlight major Skype security hole

Hackers highlight major Skype security hole
Skype - not as secure as we thought

Skype disabled its password recovery function after Russian hackers exposed a major flaw in the service's security.

Update: We've been in touch with Skype to find out more. The company told us, "Early this morning we were notified of user concerns surrounding the security of the password reset feature on our website.

"This issue affected some users where multiple Skype accounts were registered to the same email address. We suspended the password reset feature temporarily this morning as a precaution and have made updates to the password reset process today so that it is now working properly."

Skype has said it is now getting in touch with users who have been affected by today's security issues so if you don't hear from the company, you should be safe.

Original story continues:

It was discovered that hackers were able to access Skype users' accounts armed with just their username and the email address linked to the account.

The Microsoft-owned VoIP service was forced to issue a statement acknowledging the hole, saying, "We have had reports of a new security vulnerability issue."

Vulnerability issue

"As a precautionary step we have temporarily disabled password reset as we continue to investigate the issue further. We apologise for the inconvenience but user experience and safety is our first priority"

Although hackers would need to know your Skype username and email address to access your account, those concerned are advised to change the email address their account is registered to.

It hasn't been a particularly good week for Microsoft on the security front: yesterday it was reported that a 16-year-old had managed to create a prototype Trojan for Windows Phone 8.

via The Verge

TOPICS
Latest in Cyber Crime
A person scanning a QR code on a smartphone
Quishing is the new QR code scam you need to watch out for – here's how to stay safe
Ransomware on the rise: how small and medium-sized businesses can achieve cyber resilience during turbulent times
Ransomware on the rise: how small and medium-sized businesses can achieve cyber resilience during turbulent times
Text Phishing Scams
Do not fall for this dangerous Amazon shopping scam
Cyber-security
Safeguarding against next-gen cyber risks
The North Face jacket
Thousands of North Face customers accounts hacked, personal data stolen
Smartphone hacked with data flow in the background
9 signs your phone has been hacked
Latest in News
Microsoft
"Another pair of eyes" - Microsoft launches all-new Security Copilot Agents to give security teams the upper hand
Cassian Andor looking nervously over his shoulder in Andor season 2
New Andor season 2 trailer has got Star Wars fans asking the same question – and it includes an ominous call back to Rogue One's official teaser
Ncuti Gatwa as The Fifteenth Doctor in Doctor Who
Disney+ drops new trailer for Doctor Who season 2 that promises an epic adventure across time and space
23andMe
23andMe is bankrupt and about to sell your DNA, here's how to stop that from happening
A phone showing a ChatGPT app error message
ChatGPT was down for many – here's what happened
AirPods Max with USB-C in every color
Apple's AirPods Max with USB-C will get lossless audio in April, but you'll need to go wired