Security researcher Yasser Ali has publicly disclosed what appear to be three new vulnerabilities in PayPal’s website. When used together, Ali claims they can be used to hijack anyone’s account in a targeted attack. The “targeted attack” part here is important: even if Ali’s findings work as he describes, an attacker would still require some […]