A group of hackers on Thursday published a list of more than 453,000 log-in credentials on the Internet that were allegedly stolen from a database associated with an unnamed Yahoo service.
The group of hackers calls itself “the D33Ds Company” and claims to have hacked into the database by exploiting an SQL injection vulnerability found on a Yahoo subdomain.
We can have all the security in place on our side, but if the people running the service sleep on the wheel, we’re screwed.