{"slug": "legacy-lenovo-login-opens-5k-dropbox-accounts-to-attackers", "title": "Legacy Lenovo login opens 5k Dropbox accounts to attackers", "summary": "A legacy Lenovo login vulnerability exposed approximately 5,000 Dropbox accounts to attackers, according to a report from The Register. The issue stemmed from an outdated authentication mechanism that allowed unauthorized access, underscoring risks in legacy systems.", "body_md": "### TOP STORIES\n\n[AI](https://beta.theregister.com/tag/ai)\n\n-\nai and ml\n\n#### With Gemini 3.8 Flash, Google reminds everyone it's still in the race\n\nAI model scores well, runs fast, and doesn't cost too much (yet)\n\n-\nsecurity\n\n#### AI agents carried out every step of this ransomware attack – then left the victim an 80-page security audit\n\nAdding insult to injury\n\n-\nai and ml\n\n#### Anthropic promises zero data retention – but customers must check it worked\n\nMore compliance-friendly stance could boost appeal of Fable\n\n-\nSecurity\n\n#### Attacker stole a METR API key, used $600K worth of credits, and no one noticed for weeks\n\nThe model provider gave METR the credits for free. An actual customer would not have been so lucky\n\n-\nai and ml\n\n#### Anthropic pledges to try harder to keep models under control, asks partners to chip in\n\nSecurity ... this time it will be different\n\n[Infosec](https://beta.theregister.com/security)\n\n-\nSecurity\n\n#### Russians are posing as Signal support to launch phishing attacks\n\nPLUS: US takes down Iranian propaganda sites; Marketing company asks 'Why Do We Have Your Information?' And more!\n\n-\nSecurity\n\n#### Microsoft patches failed to fix on-prem SharePoint, which is now under zero-day attack\n\nPLUS: China upgrades smartphone surveillance tools; Ring eases anti-snooping stance; and more\n\n-\nBlack Hat and DEF CON\n\n#### DEF CON Franklin project enlists hackers to harden critical infrastructure\n\nVoting village reports have been so successful, says Jeff Moss, that the whole of DEF CON will now be included\n\n-\nSecurity\n\n#### EQT buys majority share in Swiss cybersecurity biz Acronis\n\nWent at equivalent of $3.5B+ valuation for entire firm, though portion sold not specified\n\n-\nMalware Month\n\n#### Ten years since the first corp ransomware, Mikko Hyppönen sees no end in sight\n\nOn the plus side, infosec's a good bet for a long, stable career\n\n[FOSS](https://beta.theregister.com/tag/FOSS)\n\n-\n#### Offshoots of cancelled TrueNAS Core upgrade to FreeBSD 15\n\nExeunt zVault stage right; enter FreeCORE and BSDnas\n\n-\n#### Debian votes to let contributors code with AI\n\nDisclosure optional, quality mandatory\n\n-\n#### LibreOffice 26.8 is out – local first, and with no AI\n\nIt looks a bit clunky, but it does the job – and on your own computer\n\n-\n#### Keepers of Noble Numbats to be offered a Resolute Racoon: Ubuntu 26.04.1 is coming\n\nGRUB's up for furry new update\n\n-\n#### AROS, the FOSS recreation of AmigaOS, comes to Raspberry Pi\n\nPlus: new official Amiga-branded hardware is coming\n\n-\n#### Emperor Penguin Linus Torvalds banishes a bug – with a bot\n\nThe lad himself finds and fixes a tricky one… or does he?", "url": "https://wpnews.pro/news/legacy-lenovo-login-opens-5k-dropbox-accounts-to-attackers", "canonical_source": "https://www.theregister.com/security/2026/09/02/legacy-lenovo-login-opens-5000-dropbox-accounts-to-attackers/5293924", "published_at": "2026-09-02 20:13:26+00:00", "updated_at": "2026-09-02 20:22:38.186301+00:00", "lang": "en", "topics": ["ai-policy"], "entities": ["Lenovo", "Dropbox", "The Register"], "alternates": {"html": "https://wpnews.pro/news/legacy-lenovo-login-opens-5k-dropbox-accounts-to-attackers", "markdown": "https://wpnews.pro/news/legacy-lenovo-login-opens-5k-dropbox-accounts-to-attackers.md", "text": "https://wpnews.pro/news/legacy-lenovo-login-opens-5k-dropbox-accounts-to-attackers.txt", "jsonld": "https://wpnews.pro/news/legacy-lenovo-login-opens-5k-dropbox-accounts-to-attackers.jsonld"}}