SlowMist: Slack has fixed a vulnerability involving password hashing. Users should pay attention to email phishing and other risks and change their passwords in time

SlowMist Security Reminder, the team collaboration communication software Slack recently fixed the vulnerability that the user's password hash will be sent to members of other workspaces when the user creates or revokes the invitation link of his workspace. All users who created or revoked invitation links to their workspaces between July 17 and July 17, 2022. At present, the Slack team has forcibly reset the passwords of the affected users. The SlowMist security team reminds relevant Slack users to pay attention to the risks of email phishing and credentialing related to this incident, and promptly change the passwords of other accounts that are consistent with the passwords used by Slack.