Apple password reset website – gaping hole found, fixed

Apple has had a good-bad-good-bad week of it in the computer security environment. Its announcement of two-step verification for some users was quickly followed by a report of a password recovery exploit for everyone else…
Naked Security – Sophos