Account Vulnerabilities

PSN Accounts Reportedly Hijacked Despite 2FA as Transaction IDs Pass Verification

The weakness lies in account-ownership checks that accept a username plus an old transaction number.