Lenovo ID Verification Flaw Let Intruders Access About 5,000 Dropbox Accounts
Lenovo said a flaw in its ID email verification allowed unauthorised logins to about 5,000 Dropbox accounts between 4 and 21 August. Dropbox linked the problem to its integration with Lenovo as an identity provider: a Lenovo ID could be created with another person’s email and then used to access the connected Dropbox account. The services now require the Dropbox password first, and users are urged to change passwords, secure emails and turn on two-step verification.