Microsoft Has Rushed Out a Fix For a Serious Bug in Its Hotmail Webmail Services.

The bug allowed a hacker to reset the password for a Hotmail account, locking out its owner and giving the attacker access to the inbox. The fix was put together because the bug was starting to be actively exploited online. One security news site reported that some hackers were offering to hack Hotmail accounts for $20 (£12). Computer security researchers discovered the vulnerability in early April and told Microsoft about it soon afterwards. The bug revolved around the way Hotmail handles the data that must pass back and forth when a user wants to reset their password. Details of the bug leaked out and led to attackers trying to find a way round it. Using add-on tools for the Firefox browser, hackers realised they could tamper with the data passing between a user and Hotmail servers in a way that handed them control over an account they targeted.''

Read More