Comcast

It looks like a flaw in Comcast’s website used for the activation of Xfinity routers can be exploited to harvest sensitive consumer information. According to reports, the purpose of the site is to make it easy for customers to set up their home internet without having to wade through a customer service call. It’s a useful service except for the fact that it can apparently be tricked into displaying the home address of wherever the router happens to be. The site can also be forced to cough up a user’s Wi-Fi name and password.

t's the second Xfinity security issue in as many months.