X Users Face Unrequested Password Resets Amid Security Concerns
- X users have been receiving unexpected password reset emails since early August, with a significant increase noted recently.
- The activity is linked to a prior API flaw from January 2022 and a dataset containing information on over 200 million users.
- A botnet has tested over 4.8 million X accounts for vulnerabilities, with two-factor authentication blocking the majority of attempts.
- A phishing campaign mimicking X’s login alerts has been active since July, targeting users to steal credentials.
- Proton email service disruptions are causing additional issues for some users relying on it for account recovery.
Users of X are experiencing security challenges as they receive unrequested password reset notifications and login alerts from unfamiliar locations. The situation is exacerbated by an old API vulnerability and ongoing phishing activities that exploit user data from past breaches.
Despite the absence of evidence for a new breach, these issues underscore the importance of robust security measures like unique passwords and two-factor authentication to protect against unauthorized access attempts. (Source)
