Ethical hacker Ananda Prakash has received a well-earned $15,000 from Facebook for exposing a dangerous password reset error. The simple vulnerability he discovered could have been used to hack into any user’s Facebook account. All you would need to know is the user’s email address or phone number. As Facebook is allowing more of its users to store credit and debit card information as part of their account, the repercussions of such a vulnerability could have been severe.

A hacker claims to have sold the passwords for 27 million users of the dating site Mate1. The alleged sale was completed in a hacker forum called “Hell” located on the dark web, a portion of the internet accessible through the Tor browser. The Mate1 server was vulnerable and the hacker was able to bypass security measures and gain control of the server.