Consumer account hardening

X says attackers may be exploiting X Money launch amid wave of unrequested password-reset emails

Users started getting reset codes they never asked for on September 1. X reports no breach and no takeovers, and its recovery flow still needs the account's email or phone, which leaves phishing as the reachable risk.