Security researchers discovered a vulnerability on the Hilton HHonors website, making it straightforward to hijack any other user’s account.

Read more in my article on the We Live Security blog.