02-03-2017 19:49 via theverge.com

Slack vulnerability would have let hackers take over accounts and read archives

This morning, a researcher reported a previously unknown vulnerability in Slack, which could be used to take over accounts and read archived messages by compromising a user’s authentication token. First reported Tuesday evening, the vulnerability has already been patched by Slack shortly. The company claims there were no successful exploitations of the bug, based on an examination of the past two years of logs.
The vulnerability was discovered by Detectify’s Frans Rosen, who created
Read more »