[Sophos]Apple password reset website - gaping hole found, fixed

[igor51]

Apple password reset website - gaping hole found, fixed

Apple has had a good-bad-good-bad week of it in the computer security environment.

Its announcement of two-step verification for some users was quickly followed by a report of a password recovery exploit for everyone else...
Source: Apple password reset website - gaping hole found, fixed