Breaking News: Researchers Identify Ongoing Session Security Flaw on Major Health Platform After Disclosure Rejection
Security researchers from Webaon have identified multiple security weaknesses on a major U.S. health information platform , raising fresh concerns about authentication standards and user safety across medical-related websites in 2025. The most significant issue involves persistent user sessions that remain valid even after a password reset, allowing attackers to maintain access indefinitely once inside an account. In addition, researchers confirmed the platform is vulnerable to clickjacking and discovered that the issues could be chained with a session fixation weakness , further amplifying the potential impact. These findings highlight a larger industry-wide challenge: maintaining modern, resilient account security for platforms that handle highly sensitive user information. A Security Breakdown With Real-World Impact According to researchers at Webaon, the core issue stems from the platform’s failure to invalidate authenticated sessions when users change their passwords. I...