Cloud communications supplier Twilio has unveiled that unknown menace actors took gain of an unauthenticated endpoint in Authy to recognize data involved with Authy accounts, together with users’ cell phone numbers.
The business mentioned it took methods to safe the endpoint to no longer settle for unauthenticated requests.
The growth comes days after an on line persona named ShinyHunters printed on BreachForums a database comprising 33 million phone numbers allegedly pulled from Authy accounts.

Protect and backup your data using AOMEI Backupper. AOMEI Backupper takes secure and encrypted backups from your Windows, hard drives or partitions. With AOMEI Backupper you will never be worried about loosing your data anymore.
Get AOMEI Backupper with 72% discount from an authorized distrinutor of AOMEI: SerialCart® (Limited Offer).
➤ Activate Your Coupon Code
Authy, owned by Twilio since 2015, is a popular two-factor authentication (2FA) application that adds an more layer of account security.
“We have seen no evidence that the danger actors obtained access to Twilio’s units or other sensitive information,” it claimed in a July 1, 2024, security inform.
But out of an abundance of warning, it is recommending that consumers improve their Android (edition 25.1. or later on) and iOS (model 26.1. or afterwards) applications to the hottest model.
It also cautioned that the menace actors may perhaps attempt to use the phone selection related with Authy accounts for phishing and smishing attacks.
“We stimulate all Authy customers to stay diligent and have heightened awareness all around the texts they are getting,” it observed.
Identified this short article exciting? Observe us on Twitter and LinkedIn to read more exclusive written content we write-up.
Some pieces of this article are sourced from:
thehackernews.com