Tag Archive for infosec

Macys.com Password Reset Mystery: How Macys.com Gives Spammers Email Addresses

I’ve noticed a regularly occurring email in my inbox: a password reset link sent from Macys.com. The problem with this? I didn’t try to reset my password!  Someone else is requesting a password reset using my email address. But since they can’t actually reset my password this way (since they don’t have access to my email) it’s weird that they would bother, right? Unfortunately, no, I… Read more →