{"id":12023,"date":"2016-12-14T18:02:42","date_gmt":"2016-12-14T23:02:42","guid":{"rendered":"http:\/\/www.thundercloud.net\/infoave\/new\/?p=12023"},"modified":"2016-12-14T18:02:42","modified_gmt":"2016-12-14T23:02:42","slug":"yahoo-hacked-again-time-to-run-away-from-yahoo","status":"publish","type":"post","link":"https:\/\/www.thundercloud.net\/infoave\/new\/yahoo-hacked-again-time-to-run-away-from-yahoo\/","title":{"rendered":"Yahoo Hacked Again… Time to Run Away From Yahoo"},"content":{"rendered":"

Yahoo Hacked Again… Time to Run Away From Yahoo<\/h1>\n

Two days ago we wrote an article<\/a> <\/strong>advising all Yahoo users to close their accounts due to Yahoo’s lack of security and apparent inability to deal with it.\u00a0Just when we thought it could not get any worse with Yahoo … it just got worse. This time, Yahoo admits that it had more than one billion accounts stolen.<\/p>\n

The following article appeared today ( 14 December 2016) on ZDNet:<\/em><\/p>\n

\n

Yahoo hacked again, more than one billion accounts stolen<\/h1>\n<\/blockquote>\n
<\/p>\n
\n
\n
<\/span>
(Image: file photo)<\/p>\n<\/figcaption><\/figure>\n

Yahoo has disclosed that more than one billion accounts may have been stolen from the company’s systems in another cyberattack.<\/p>\n

The company said in a statement<\/a> Wednesday after the markets closed that unnamed attackers stole the accounts in August 2013, a little over a year prior to a previously disclosed attack in September, in which attackers stole around 500 million accounts in 2014.<\/p>\n

But the company said it wasn’t able to identify the intrusion associated with August breach.<\/p>\n

The statement said that the hackers may have stolen names, email addresses, telephone numbers, hashed passwords (using the weak, easy to crack MD5 algorithm) dates of birth, and in some cases encrypted or unencrypted security questions and answers.<\/p>\n

Yahoo said it has invalidated unencrypted security questions and answers so that they cannot be used to access affected accounts.<\/p>\n

But payment card data and bank account information, stored in separate systems, are not thought to have been stolen in the attack.<\/p>\n

Source code stolen<\/h3>\n

The company also admitted that hackers may have developed a way of accessing accounts without a password by stealing Yahoo’s secret source code.<\/p>\n

“Based on the ongoing investigation, the company believes an unauthorized third party accessed the company’s proprietary code to learn how to forge cookies,” which can be used to store authentication credentials locally.<\/p>\n

“The outside forensic experts have identified user accounts for which they believe forged cookies were taken or used,” said the statement.<\/p>\n

Yahoo has also invalidated the cookies.<\/p><\/blockquote>\n

Reporting delay ‘unacceptable’<\/h3>\n

It’s the latest security blow against the former internet giant, which earlier this year said it had been attacked<\/a> by “state-sponsored” hackers — just as it was being bought by Verizon for $4.8 billion<\/a>.<\/p>\n

But Yahoo still hasn’t said who behind the attack, or which state may have sponsored the hackers.<\/p>\n

Verizon reiterated its statement on Wednesday, saying the company “will evaluate” the purchase as Yahoo continues its investigation…<\/p><\/blockquote>\n

You can read the entire article on ZDNet …<\/strong><\/a><\/p>\n

 <\/p>\n<\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

Yahoo Hacked Again… Time to Run Away From Yahoo Two days ago we wrote an article advising all Yahoo users to close their accounts due to Yahoo’s lack of security and apparent inability to deal with it.\u00a0Just when we thought it could not get any worse with Yahoo … it just got worse. This time, Yahoo admits that\u2026 Read More »<\/a><\/span><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1678,1426,1670,1656,1674,779],"tags":[],"_links":{"self":[{"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/posts\/12023"}],"collection":[{"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/comments?post=12023"}],"version-history":[{"count":1,"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/posts\/12023\/revisions"}],"predecessor-version":[{"id":12024,"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/posts\/12023\/revisions\/12024"}],"wp:attachment":[{"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/media?parent=12023"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/categories?post=12023"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/tags?post=12023"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}