News on Medial

2FA security codes for some of the world’s biggest companies were left unprotected online

Techradar · 1y

A company specializing in SMS text message routing, YX International, has secured its database after a security researcher discovered it was accessible with just an internet connection and public IP address. The vulnerable database handled time-sensitive messages used for two-factor authentication (2FA) services, such as one-time passcodes and reset links. The leak, which contained email addresses and passwords, was reported to YX International by TechCrunch and has since been fixed. The database handled access codes for social media and tech giants like Facebook, Google, and TikTok, but there is no evidence of data theft.