The storefront update stripped account settings pages of all options to add or modify two-factor verification. Although the platform still delivers occasional email access codes during login, rotating codes from password applications are completely ignored by the system. Furthermore, logged-in individuals can change existing account passwords without having to supply their previous credentials. Neither owner IGN Entertainment nor its parent company Ziff Davis immediately responded to requests for comment regarding the issue.
Key points
The recent platform redesign introduced account vulnerabilities by removing access to cri…: The recent platform redesign introduced account vulnerabilities by removing access to critical security management settings.
Existing secondary defenses are only partially active, relying on email codes while ignor…: Existing secondary defenses are only partially active, relying on email codes while ignoring third-party authenticator applications.
Storefront leadership and parent company Ziff Davis have not yet publicly addressed the m…: Storefront leadership and parent company Ziff Davis have not yet publicly addressed the missing security controls.
Sources checked by our analysis pipeline: 1
The Humble Bundle storefront for buying games and other software recently got a new look, but on the settings page, it no longer offers a way to add or update two-factor verification methods, as reported by Kotaku. PC Gamer also points out that there are Humble Bundle support pages discussing two-factor verification, and the writer for the publication said that they had set up two-factor verification on the old version of the site.
Humble Bundle redesign removes two-factor verification from settings
A new look for the Humble Bundle storefront is missing an important security feature that was previously there.
A new look for the Humble Bundle storefront is missing an important security feature that was previously there.
However, it does appear that, at least as of now, there is some form of two-factor verification. When I tried logging into my Humble Bundle account while writing this article, I was prompted to check my email for an access code before I could access my account. While logged in, I was able to update my password, but I didn’t have to enter…
Analysis firm SemiAnalysis has raised questions regarding potential government involvement in the departure of Nvidia's top executive. The claim points to possible national security considerations surrounding leadership changes at the major technology company. However, concrete evidence and context explaining the alleged intervention remain entirely absent at this stage.
The wearable fitness company introduced Whoop Humans to provide an authentic digital space free from artificial intelligence, spam bots, and synthetic media. Built directly into the platform's mobile interface, the system leverages live biological data from connected wristbands to ensure every participant is an actual individual. This deployment represents a growing push by consumer tech firms to combat digital manipulation through proprietary device verification.
Federal investigators have tied massive digital asset losses directly to sophisticated social engineering campaigns orchestrated by foreign operatives. These threat actors bypassed standard security measures by impersonating trusted entities during interactive online meetings. The ongoing strategy demonstrates how emerging synthetic media tools are increasingly weaponized to divert substantial financial capital.