Twilio has confirmed that an unsecured API endpoint allowed threat actors to verify the phone numbers of millions of Authy multi-factor authentication users, potentially making them vulnerable to SMS phishing and SIM swapping attacks.
Posting this against your comment for visibility, I would recommend anyone that was using authy switch to bitwarden’s dedicated 2F authentication app. The company maintains several security compliance certificates and fairly regularly gets audited which they post publicly at https://bitwarden.com/help/is-bitwarden-audited/
Posting this against your comment for visibility, I would recommend anyone that was using authy switch to bitwarden’s dedicated 2F authentication app. The company maintains several security compliance certificates and fairly regularly gets audited which they post publicly at https://bitwarden.com/help/is-bitwarden-audited/
Oh neat. I use their password manager but totally somehow missed them releasing a separate 2fa app.