#federated login

Dropbox accounts hijacked after attacker abused a Lenovo signup flaw

A weakness in how Lenovo verified email addresses let an attacker create fake Lenovo IDs and walk straight into around 5,000 Dropbox accounts, no password needed.