Sam Stepanyan :verified: 🐘 on Nostr: #Twilio has confirmed that an unsecured API endpoint allowed #ShinyHunters threat ...

#Twilio has confirmed that an unsecured API endpoint allowed #ShinyHunters threat actors to verify and leak the phone numbers of 33 million of Authy MFA users:
#APISecurity
👇
https://www.bleepingcomputer.com/news/security/hackers-abused-api-to-verify-millions-of-authy-mfa-phone-numbers/