San Francisco (US) (AP): Personal emails linked to 235 million Twitter accounts hacked some time ago have been exposed according to Israeli security researcher Alon Gal making millions vulnerable to having their accounts compromised or identities exposed if they have used the site anonymously to criticize oppressive governments, for instance.
Gal, who is the co-founder and chief technology officer at cybersecurity firm Hudson Rock, wrote in a LinkedIn post this week that the leak "will unfortunately lead to a lot of hacking, targeted phishing, and doxxing".
While account passwords were not leaked, malicious hackers could use the email addresses to try to reset people's passwords, or guess them if they are commonly used or reused with other accounts.
That's especially a risk if if the accounts are not protected by two-factor authentication, which adds a second layer of security to password-protected accounts by having users enter an auto-generated code to log in.
People who use Twitter anonymously should have a Twitter-dedicated email address that does not disclose who they are and is used solely for Twitter, experts say.
Though the hack appears to have taken place before Elon Musk took over Twitter, the news of the leaked emails adds another headache for the billionaire, whose first couple months as head of Twitter have been chaotic, to say the least.
Twitter did not immediately respond to a message for comment on the hack.
News of the breach could put the company in trouble with the Federal Trade Commission. The San Francisco company signed a consent agreement with the agency in 2011 that required it to address serious data-security lapses.
Twitter paid a USD 150 million penalty last May, several months before Musk's takeover, for violating the consent order. An updated version established new procedures requiring the company to implement an enhanced privacy-protection program as well as beefing up information security.
In November, a group of Democratic lawmakers asked federal regulators to investigate any possible violations by the platform of consumer-protection laws or of its data-security commitments.
The FTC said at the time it is "tracking recent developments at Twitter with deep concern," though no formal investigation has been announced. But experts and current and former Twitter employees have been warning of serious security risks flowing from the drastically reduced staff and deepening disorder within the company.
In August, Twitter's former head of security filed a whistleblower complaint alleging that the company misled regulators about its poor cybersecurity defences and its negligence in attempting to root out fake accounts that spread disinformation.
Among Peiter Zatko's most serious accusations is that Twitter violated the terms of the 2011 FTC settlement by falsely claiming that it had put stronger measures in place to protect the security and privacy of its users.
Let the Truth be known. If you read VB and like VB, please be a VB Supporter and Help us deliver the Truth to one and all.
Mumbai (PTI): Ryan Rickelton's whirlwind unbeaten ton was overshadowed by Heinrich Klaasen's unbeaten 65 as Sunrisers Hyderabad defeated Mumbai Indians by six wickets in an IPL match here on Wednesday.
Chasing an imposing 244-run target, Travis Head (76 off 30) and Abhishek Sharma (45 off 24) shared 129 runs for the opening wicket to set the platform for SRH.
Klaasen (65 not out off 30 balls) then displayed his all-round hitting abilities to guide SRH home with the help of Nitish Kumar Reddy (21) and Salil Arora (30 not out off 10) in 18.4 overs.
Earlier, Rickelton's knock powered MI to 243 for five.
MI rode on a 93-run stand between Rickelton (123 not out off 55 balls) and Will Jacks (46 off 22) in 7.1 overs for the opening stand to power the side.
MI skipper Hardik Pandya scored a valuable 31 off 15 balls before being dismissed.
Praful Hinge (2/54), Eshan Malinga (1/29), Sakib Hasan (1/39) and Nitish Kumar Reddy (1/31) were the wicket-takers for SRH.
Brief Scores:
Mumbai Indian: 243 for 5 in 20 overs (Ryan Rickelton 123 not out; Praful Hinge 2/54).
Sunrisers Hyderabad: 249 for 4 in 18.4 overs (Travis Head 76, Heinrich Klaasen 65 not out; AM Ghazanfar 2/51).
