Date:02/03/17
Yahoo Inc, which disclosed two massive data breaches last year, said that about 32 million user accounts were accessed by intruders in the last two years using forged cookies.
The company said some of the latest intrusions could be connected to the “same state-sponsored actor believed to be responsible for the 2014 breach” in which at least 500 million accounts were affected.
“Based on the investigation, we believe an unauthorised third party accessed the company’s proprietary code to learn how to forge certain cookies,” Yahoo said in its latest annual filing.
These cookies have been invalidated so they cannot be used to access user accounts, the company said.
Forged cookies allow an intruder to access a user’s account without a password.
Yahoo also said in December that data from more than one billion user accounts was compromised in August 2013, making it the largest breach in history.
The company said on Wednesday that it would not award Chief Executive Marissa Mayer a cash bonus for 2016, following the independent committee’s findings related to the 2014 security incident.
Mayer has also offered to forgo any 2017 annual equity award as the breaches occurred during her tenure, Yahoo said.
Last month, Verizon Communications Inc, which is in the process of buying Yahoo’s core assets, lowered its original offer by $350m to $4.48bn.
32 million accounts accessed using ‘forged cookies’ – Yahoo
Yahoo Inc, which disclosed two massive data breaches last year, said that about 32 million user accounts were accessed by intruders in the last two years using forged cookies.The company said some of the latest intrusions could be connected to the “same state-sponsored actor believed to be responsible for the 2014 breach” in which at least 500 million accounts were affected.
“Based on the investigation, we believe an unauthorised third party accessed the company’s proprietary code to learn how to forge certain cookies,” Yahoo said in its latest annual filing.
These cookies have been invalidated so they cannot be used to access user accounts, the company said.
Forged cookies allow an intruder to access a user’s account without a password.
Yahoo also said in December that data from more than one billion user accounts was compromised in August 2013, making it the largest breach in history.
The company said on Wednesday that it would not award Chief Executive Marissa Mayer a cash bonus for 2016, following the independent committee’s findings related to the 2014 security incident.
Mayer has also offered to forgo any 2017 annual equity award as the breaches occurred during her tenure, Yahoo said.
Last month, Verizon Communications Inc, which is in the process of buying Yahoo’s core assets, lowered its original offer by $350m to $4.48bn.
Views: 382
©ictnews.az. All rights reserved.
Similar news
- Cellphone Use May Raise Cancer Risk
- Australian police pushes cyber safety education
- Vietnam aims to lead in e-government
- Senate Website Gets Hacked
- US builds net for cyber war games
- Japan enacts anti-computer virus law
- India passes law vs e-waste
- Anonymous Declares War On The City Of Orlando
- Microsoft highlights evolving dangers as online identity data proliferates
- Consumers want internet security to be provided by banks
- Government facilities targets of cyber attack
- South Korean web attacks might been war drill
- Sri Lanka to Establish National Passport Database to Increase Border Security
- Hi-tech crime agencies set to employ information security professionals
- Phone hacking and online campaign bring down the News of the World
