One Article Review
| Source |  Schneier on Security |
|---|---|
| Identifiant | 8300539 |
| Date de publication | 2023-01-12 12:18:41 (vue: 2023-01-12 13:09:14) |
| Titre | Experian Privacy Vulnerability (Recyclage) |
| Texte | Brian Krebs is reporting on a vulnerability in Experian’s website: Identity thieves have been exploiting a glaring security weakness in the website of Experian, one of the big three consumer credit reporting bureaus. Normally, Experian requires that those seeking a copy of their credit report successfully answer several multiple choice questions about their financial history. But until the end of 2022, Experian’s website allowed anyone to bypass these questions and go straight to the consumer’s report. All that was needed was the person’s name, address, birthday and Social Security number... |
| Notes | ★★ |
| Envoyé | Oui |
| Condensat | 2022 about address all allowed answer anyone been big birthday brian bureaus but bypass choice consumer consumer’s copy credit end experian experian’s exploiting financial glaring have history identity krebs multiple name needed normally number one person’s privacy questions report reporting requires security seeking several social straight successfully these thieves those three until vulnerability weakness website website: |
| Tags | Vulnerability |
| Stories | |
| Move | 
|
Les reprises de l'article (1):
| Source | Krebs on Security |
|---|---|
| Identifiant | 8299249 |
| Date de publication | 2023-01-09 14:05:15 (vue: 2023-01-09 15:07:04) |
| Titre | Identity Thieves Bypassed Experian Security to View Credit Reports |
| Texte | Identity thieves have been exploiting a glaring security weakness in the website of Experian, one of the big three consumer credit reporting bureaus. Normally, Experian requires that those seeking a copy of their credit report successfully answer several multiple choice questions about their financial history. But until the end of 2022, Experian's website allowed anyone to bypass these questions and go straight to the consumer's report. All that was needed was the person's name, address, birthday and Social Security number. |
| Notes | ★★★ |
| Envoyé | Oui |
| Condensat | 2022 about address all allowed answer anyone been big birthday bureaus but bypass bypassed choice consumer copy credit end experian exploiting financial glaring have history identity multiple name needed normally number one person questions report reporting reports requires security seeking several social straight successfully these thieves those three until view weakness website |
| Tags | |
| Stories | |
| Move |
|
L'article ne semble pas avoir été repris sur un précédent.