World Bulletin / News Desk
More than 400,000 Yahoo Inc user names and passwords were stolen and published on the Web, putting other websites at risk as well, after hackers exploited a vulnerability in Yahoo's computer systems.
Some logins for Google Inc, AOL Inc and Microsoft Corp services were among those compromised. The three companies said they required affected users to reset passwords for sites including Gmail, AOL, Hotmail, MSN and Live.com.
Yahoo issued a statement apologizing for the breach, the latest setback for a company that has lost two chief executives in a year and is struggling to revive stalled revenue growth.
Chairman Alfred Amoroso acknowledged that Yahoo had experienced a "tumultuous" year at its annual shareholder meeting on Thursday morning. Interim CEO Ross Levinsohn told attendees he was optimistic about the company's progress.
The breach prompted criticism from security experts who said that a major Internet firm like Yahoo should do a better job at protecting user data.
"This points to some very lax security practices," said Rob D'Ovidio, associate professor of criminal justice at Drexel University.
As an example, he noted that the hackers were able to produce more than 400,000 cleartext passwords within a day. That indicates that Yahoo either did not encrypt them at all or used an encryption method that was easy to crack, he said.
The professional networking service LinkedIn recently came under similar criticism. Security experts chided the company for failing to use sophisticated encryption practices to secure its passwords, millions of which were released following a breach last month.
Yahoo spokeswoman Dana Lengkeek said "an older file" had been stolen from Yahoo Contributor Network, an Internet publishing service that Yahoo purchased about two years ago. It helps writers, photographers and videographers to sell their work over the Web.
"We are fixing the vulnerability that led to the disclosure of this data, changing the passwords of the affected Yahoo! users and notifying the companies whose users' accounts may have been compromised," she said.
AOL said the Yahoo data published on the Web included valid passwords for 1,699 accounts. Microsoft and Google declined to provide similar numbers.
Other firms whose customers were at risk include Comcast Corp, Verizon Communications Inc and AT&T , Rapid7 researcher Marcus Carey said. He estimated that tens of thousands of accounts of users of services other than Yahoo were affected by the breach.
AT&T and Verizon did not have any immediate comment. Officials with Comcast could not be reached.
AOL Senior Vice President David Temkin said spammers typically use credentials like the ones stolen from Yahoo to break into email accounts and use them to send out spam.
"In this case, I think we actually got ahead of it before the people who stole those accounts were able to use them," Temkin said.
The five most popular passwords in the group were "123456", "password", "welcome" and "ninja", according to an analysis by anti-virus software maker ESET.
Greece has already received two bailouts totalling 240 billion euros but fellow euro zone member Ireland said last week that it would have to negotiate a third programme.
The Ukraine crisis has tested the loyalties of Bulgaria, a Balkan country with historical ties to Moscow and heavily dependent on Russian energy supplies.
Syria expels three United Nations aid workers hindering aid development in the country
Russia has overcome a "psychological barrier" and is ready to deepen its economic ties with China, Deputy Prime MinisterArkady Dvorkovich said
With Chancellor Angela Merkel's right-left coalition plus the opposition Greens, it was the biggest majority for any euro zone rescue package so far in the 631-seat chamber.
The agreement commits Tanzania, Kenya, Uganda, Rwanda and Burundi to cooperate with the United States in customs issues, ease red tape at borders, reduce customs wait times and harmonize trade standards.
Sri Lankan President Maithripala Sirisena has unnerved China with his re-examination of certain projects that Chinahas invested in, including a $1.5 billion "port city" project in Colombo.
EU energy chief Maros Sefcovic invited Russian Energy Minister Alexander Novak and his Ukrainian counterpart Volodymyr Demchyshyn for talks
Gazprom and Ukrainian state energy firm Naftogaz have accused each other of not sticking to agreements on gas supplies.
The new canal, that will allow two-way traffic of larger ships, is supposed to increase revenues by 2023 to $13 billion.
A day after euro zone finance ministers agreed to a four-month extension of a financial rescue, Finance Minister Yanis Varoufakis gave a frank assessment of Greece's financial position.
The agreement is the culmination of talks that began in September after the government decided its own solutions to its fiscal crisis were failing to convince investors.
Energy union highlights bloc's attempt to seek independency from its main gas supplier - Russia.
Merkel's right-left coalition is set to prevail, despite vocal pockets of resistance on the right and left.
Republicans passed the bill to increase pressure on Obama to approve the pipeline, a move the president said would bypass a State Department process that will determine whether the project is in the U.S. national interest.
Turkish PM Davutoglu expresses Turkey's readiness to help in supplying energy to Central Europe.