In the roughly five months that the Okta phishing campaign has been active, it has racked up 9,931 login credentials from about 130 organizations. 5,541 included MFA codes, and 3,120 included the victim's email account.
A massive data breach of video streaming service Twitch has exposed just about everything possible that could be taken. The 125 GB torrent has been confirmed by Twitch and is only the "first part" according to hackers.
The private tweets that were supposed to be restricted to authorized Twitter Circle users were able to make their way into the 'For You' tab of others during a period in April, including non-followers.
The primary concern with Twitter’s zero-day security breach is that authoritarian governments might tie names to the anonymous accounts of activists, political opposition and journalists they are targeting.
Business users' billing information was inadvertently stored in the browser's cache, making it possible for the exposed data to be accessed by users who share computers.
The seemingly odd focus on relative trivialities during the Twitter hack (“OG” usernames and crypto scamming) is due to the culprit being an inexperienced minor.
Twitter hack of high-profile accounts a result of employees tricked into giving up access to support tools that led to compromised accounts posting Bitcoin doubling scam.
Security researchers had matched email addresses to account names, providing an indication that the data leak was legitimate, but Twitter says that the data was gathered via a variety of publicly available sources.
Latest Twitter privacy breach exposed the inappropriate use of phone numbers and email addresses to serve up targeted ads to users. This data was collected for the purpose of the platform's two-factor authentication.
Twitter cites abuse of the text messaging 2FA option by bad actors as the reason for the change in policy. The service will still allow free use of authentication apps or hardware security keys as an additional account security layer.
