BleepingComputer on Nostr: Twilio has confirmed that an unsecured API endpoint allowed threat actors to verify ...

Twilio has confirmed that an unsecured API endpoint allowed threat actors to verify the phone numbers of millions of Authy multi-factor authentication users, potentially making them vulnerable to smishing and SIM swapping attacks.

https://www.bleepingcomputer.com/news/security/hackers-abused-api-to-verify-millions-of-authy-mfa-phone-numbers/