Steam account hijacking 'bug' fixed by Valve
Requesting password recovery email allowed attacker to gain access to gaming accounts without needing password or access to email accountPC gaming platform Steam has fixed a bug that allowed anyone to steal a user account by being armed with nothing more than the account’s username.The bug affected Steam’s password recovery process for four days, from 21–25 July, and was excruciatingly simple: an attacker could try to log-in to someone else’s Steam account, and ask for a password recover
Read more »