CCP Sreegs has posted a new blog about the recent security issues with the EVE Online forums. In it, Sreegs details the exploits, what has and is shut down, what fans should be concerned about and more. It's a good read and, in typical CCP fashion, reveals the plan to fix it ASAP.
We do not see any evidence of anyone being able to access your personal information or credit cards, which are actually stored in a secure environment which isn't in the communication path for the forums in any way. In essence, the vulnerabilities were limited to people's ability to escalate their privileges on the forum itself and nowhere else. Even were someone able to have injected script the method by which your information would have been at risk would have been in the form of malware, session theft or keylogging of your local machine rather than some window into our secure environment. That being said, it's always a best practice to keep your computers safe from malware and your passwords changed on a regular basis and now's as good a time as any to scan that PC and change your password.
Read more here.
