A recent cyberattack on X (formerly Twitter) prompted Elon Musk to attribute the breach to “database wrangling” and downplay its severity. However, security researchers are largely skeptical of this explanation, suggesting it masks a more significant issue. The attack, which affected numerous accounts, involved the theft of authentication tokens that allowed attackers to post on behalf of users.
Researchers argue that the theft of authentication tokens points to a deeper problem than simple “database wrangling.” They believe it could indicate vulnerabilities within X’s core security infrastructure. Specifically, the ability to compromise these tokens suggests potential weaknesses in access control, authentication processes, or encryption protocols.
The concern is that if authentication tokens were easily accessed, other sensitive user data might also be at risk. Several researchers highlighted X’s history of security lapses and expressed doubts about the platform’s current security measures. They also questioned the transparency of X’s response to the incident and the decision to minimize its impact.
The article emphasizes the researchers’ call for greater transparency from X regarding the nature and extent of the breach, as well as the measures being taken to prevent future incidents. They suggest the incident warrants a more thorough investigation to determine the root cause and ensure user data is adequately protected.
find the original article here: https://www.yahoo.com/tech/security-researchers-arent-buying-musks-spin-on-the-cyberattack-that-took-down-x-203402687.html