🚀 Medial Secures Investment on Shark Tank India - Fueling the Future of Professional Social Networking. 🔥
Login

News on Medial

How Google Authenticator made one company’s network breach much, much worse

ArstechnicaArstechnica · 2y ago
How Google Authenticator made one company’s network breach much, much worse
Medial

Security company Retool criticized Google's authenticator app for making a recent internal network breach worse. The breach resulted in attackers gaining access to the accounts of 27 customers in the cryptocurrency industry. The attack started when a Retool employee clicked on a text message link claiming to be from the company's IT team. The employee logged into the linked site and provided a password and a temporary one-time password (TOTP) from Google authenticator. The attackers then called the employee, claiming to be an IT team member, and obtained an additional multi-factor code. Retool argues that Google's recent synchronization feature for authenticator codes is highly insecure, as it allowed the attackers to compromise multiple company accounts.

Related News

Android 15 might soon be able to protect your two-factor authentication codes

TechradarTechradar · 1y ago
Android 15 might soon be able to protect your two-factor authentication codes
Medial

Google is reportedly working on enhancing Two-Factor Authentication (2FA) security in Android 15. A new permission called RECEIVE_SENSITIVE_NOTIFICATIONS has been discovered in the Android 14 QPR3 Beta 1, with indications that it may be limited to Google's own apps or OEM-signed applications. Another flag called OTP_REDACTION has also been found, suggesting that future updates might prevent sensitive notifications, such as One Time Passcodes (OTP) used for 2FA, from being displayed on the lock screen. These measures aim to protect 2FA codes from unauthorized access by untrusted apps or individuals. Using authenticator apps or physical security keys is recommended as more secure alternatives to SMS-based 2FA.

Instamart pilots physical experiential store in Gurugram

EntrackrEntrackr · 1m ago
Instamart pilots physical experiential store in Gurugram
Medial

News All Stories Instamart pilots physical experiential store in Gurugram The outlet, located at M3M 65th Avenue, operates as an Instamart branded experiential store and is separate from the company’s dark store network. Harsh Upadhyay 21 Dec 2025 Swiggy's quick commerce arm Instamart has piloted a physical experiential store in Gurugram, as the company tests a limited offline format alongside its dark store led delivery operations, according to media reports and people aware of the development. The outlet, located at M3M 65th Avenue, operates as an Instamart branded experiential store and is separate from the company’s dark store network. Consumers can visit the store to see select products, with purchases being made through walk-in transactions at the outlet rather than via the Instamart app. As reported earlier, the store carries a narrow assortment of around 100 to 200 SKUs, compared to the much wider catalogue available at Instamart dark stores. Sources said these experiential formats are being opened in and around residential societies by sellers on the Instamart platform. The stores are not positioned as retail outlets but as small format experiential spaces with a limited SKU range. The focus is largely on categories where consumers prefer physical inspection before purchase, including fresh fruits and vegetables, pulses, new product launches and offerings from some direct to consumer brands. The initiative is expected to be primarily centred on fresh categories. The transaction structure at these stores also differs from Instamart’s standard model. As per sources, payments made at the outlet are routed directly to sellers, rather than being collected by Swiggy and settled later after commission deductions. Sellers are understood to be experimenting with the format under Instamart’s branding and service support. Instamart continues to operate through a network of dark stores across multiple cities for rapid delivery of groceries and daily essentials, with the experiential outlet functioning alongside this infrastructure. Swiggy has not made an official announcement on the initiative and has not indicated whether it plans to expand the format to other locations. Swiggy did not respond to queries till publication.

Exclusive: Cloud telephony platform Exotel suffers data breach

EntrackrEntrackr · 1y ago
Exclusive: Cloud telephony platform Exotel suffers data breach
Medial

Cloud telephony platform Exotel has suffered a data breach that may have compromised details of its clients, sources familiar with the matter told Entrackr. “A massive data breach was reported on Friday which happened last week. Exotel works with many large companies, including financial institutions and their data have been breached,” said one of the sources requesting anonymity. The company’s chief executive Shivakumar Ganesan also did a town hall or emergency meeting on Friday, the person said. Confirming the data breach, an Exotel spokesperson said, “We recently identified unauthorized access to one of our cloud Infrastructure stamps in Singapore and acted swiftly to contain the issue. Importantly, no sensitive personal or financial information was compromised.” “The breach was limited and majority customers were not affected. We have already notified those impacted, providing them with detailed information and recommended steps to mitigate any potential risks,” the spokesperson added. The 13-year-old firm offers voice and SMS contact center capabilities for businesses to manage their customer engagement over the cloud. Besides India, it operates in the UAE, Indonesia, Africa, and the US. Another source said that Exotel stores call recordings and SMS of its clients on the cloud. “AWS private keys got breached from some developer. The hackers got access to the database and source code. Zomato, Khatabook and others became victims of the breach,” added the source. In a response to this, Exotel’s spokesperson clarified, “While we store call recordings and SMS of clients on the cloud none of these have been accessed or impacted in this incident.” Confirming the data breach to Entrackr, a Zomato spokesperson said, “We have been made aware of the data breach at Exotel. So far, from what we know, our merchant and customer data is fully secure and no payment related sensitive information has been compromised. Our teams are actively working with Exotel to ascertain more details on the ongoing investigation.” Entrackr has reached out to Khatabook to verify this. The Steadview Capital and A91 Partners-backed company reported a 32.1% spike in its collection to Rs 420 crore whereas its losses jumped 2.5 fold to Rs 109 crore. It is yet to file its annual report for FY24 but the firm projected a 50% revenue growth for the last fiscal year (FY25). Exotel directly competes with Knowlarity, MyOperator, Ozonotel, and Tata Communications, and a few others. Peak XV-backed Knowlarity was acquired by conversational messaging unicorn Gupshup in a $100 million deal in February 2022.

Download the medial app to read full posts, comements and news.