The Obamacare website has more than just annoying bugs. A cybersecurity expert has identified a way to hack into users' accounts.
Before the fix made by the US Department of Health and Human Services , anyone could easily reset the password on Healthcare.govwithout the user's knowledge and potentially compromise their account.
The flaw was discovered last week by Ben Simo, a security engineer in Arizona. Simo found that gaining access to users' accounts was terrifyingly simple. With the account holder's email address, a malicious person could easily track down their target on social media, where they would likely find the answers to their security questions.
📧
Subscribe to the SecNews Newsletter

