A website's weak password policy that only generates five-character passwords made it vulnerable to brute force attacks, allowing hackers to gain access to user accounts by resetting their passwords and guessing the five-character password generated by the site.
A website owner purposefully kept the password complexity weak to provide less friction for users, leading to security vulnerabilities that could be exploited by hackers. This emphasizes the importance of strong password requirements to protect user accounts.
A recently discovered SQL injection bug in an online store allowed cybercriminals to access the entire database of customer purchases and credit card data. Many high-profile individuals utilizing the site were found to be compromised by the bug.