Security researchers chained together five separate weaknesses in the popular workflow automation service Zapier that, if first discovered by a malicious actor, could have granted access to millions of user accounts and the systems those accounts connect to. The flaws, disclosed by security firm Token Security, did not require malware or insider access. The only [...] The post Zapier fixes bug chain that researchers say risked widespread account takeover appeared first on CyberScoop .