Cloud9to5Macabout 2 hours ago
Dropbox breach seemingly caused by egregious authentication failure
1 min read
Dropbox emailed users about unauthorized account access between August 4 and August 21, 2026. Attackers exploited Lenovo's email verification flaw to register Lenovo IDs and log in via single sign-on. Dropbox failed to authenticate the linked ID, then fixed the flaw and expired all Lenovo ID sessions.
Level
Hype check
Tap to vote and see what everyone thinks.
Summary by ByteBrief
