Yahoo! Voices hack reveals 453,492 passwords

Hacker group, called "D33D Company", claims to have posted 435,000 sets of usernames and passwords from the Yahoo! Voice service. The group says it used a union-based SQL injection to access the service and retrieve the data, which it says was unencrypted.

D33Ds Company says in its note that the hack was intended to warn Yahoo! about similar vulnerabilities in its sites–a dubious notion given the potentially massive privacy violation their public hack represents.

"We hope that the parties responsible for managing the security of this subdomain will take this as a wake-up call, and not as a threat," says D33D in a statement.

"There have been many security holes exploited in Web servers belonging to Yahoo that have caused far greater damage than our disclosure. Please do not take them lightly. The subdomain and vulnerable parameters have not been posted to avoid further damage."

Read more -here-

• Dropbox breach exposes customer credentials, authentication data
• Google: Passkey authentications top 1 billion across 400 million accounts
• FTC fines Razer for misrepresenting COVID masks as N95s
• FCC fines Verizon, AT&T other major carriers nearly $200 million for sharing customer data
• Federal regulators accuse Amazon executives of deleting messages
• FCC restores net neutrality rules