Users of the Twilio Authy Authenticator app may have had their phone number exposed to hackers. While the leak exposed personally identifiable information, it did not directly compromise accounts.

An in-depth analysis of Evilginx: a tool that can be used by cybercriminals to bypass Gmail and Outlook’s two-factor authentication security protections as part of a credential-stealing attack has ...

The developers of a notorious 2FA account security bypass tool have launched an updated version of their ‘as-a-service’ kit that is targeting Microsoft 365 and Gmail account holders. Researchers from ...

Turns out that the SEC's X account was hacked, partially because it neglected a very basic rule of online security. Reading time 2 minutes The Securities and Exchange Commission’s primary X account ...

Did you know you can customize Google to filter out garbage? Take these steps for better search results, including adding my work at Lifehacker as a preferred source. Researchers have demonstrated a ...

Researchers from cybersecurity firm Varonis have discovered an infostealer that collects browser credentials, including accounts and passwords, session cookies, and crypto wallets. An infostealer is a ...

Microsoft is phasing out SMS-based two-factor authentication (2FA) and SMS one-time passwords (OTPs) for personal Microsoft accounts. Calling SMS-based logins "a leading source of fraud," the company ...