X (Twitter) Experiences Major Password Reset Attack, Company Denies Breach
X, formerly Twitter, accounts were targeted on Tuesday by a significant password reset attack, with users receiving multiple unsolicited password reset emails. Some users reported receiving up to eight emails within a three-minute period. X product engineer Mridul Singhai acknowledged the issue, stating that attackers are using X's public recovery form with public usernames to trigger these resets. Singhai denied any evidence of a breach into X's systems and apologized for the influx of emails. The company's main X account, X Support, and X Money have remained silent on the matter. This incident follows the recent rollout of X Money, which enables peer-to-peer payments for U.S. Premium subscribers, making an X login potentially equivalent to a bank login and increasing the value of compromised accounts. 
