The hack is exploiting weak internal security controls that twitter has. Reset of email for so many high profile users requiring only one person to click a butt

The hack is exploiting weak internal security controls that twitter has. Reset of email for so many high profile users requiring only one person to click a button is weak design. No Review / no approval etc . Also the amount of time for them to identify it, they had blocked tweeting the address and blocked all verified users from posting before they could find the rogue account indicates logging and analysis of their admin tool actions is also not robust. Exploiting these two vulnerabilities whether by blackmail, bribe or RAT should not make a difference to consider it a hack