'Fortnite' vulnerability put millions of accounts at risk

It turns out that for the millions of people playing Fortnite, there was more than just a Victory Royale at stake. 

On Jan. 16, internet security firm Check Point Research disclosed a vulnerability in the popular online video game that could have allowed malicious actors to take over practically any Fortnite account — all a player had to do was click a malicious link. 

"By discovering a vulnerability found in some of [Fortnite owner] Epic Games’ sub-domains, an XSS attack was permissible with the user merely needing to click on a link sent to them by the attacker," explains the report. "Once clicked, with no need even for them to enter any login credentials, their Fortnite username and password could immediately be captured [by] the attacker." Read more...