X Users Receive Unrequested Password Reset Emails

X users are reporting a surge in unsolicited password reset emails and login alerts, potentially linked to an old API flaw and a phishing campaign.