Latest Twilio news

Hackers abused API to verify millions of Authy MFA phone numbers

Twilio has confirmed that an unsecured API endpoint allowed threat actors to verify the phone numbers of millions of Authy multi-factor authentication users, potentially making them vulnerable to SMS phishing and SIM swapping attacks.
- Lawrence Abrams
- July 03, 2024
- 12:43 PM
- 2
FBI: Androxgh0st malware botnet steals AWS, Microsoft credentials

CISA and the FBI warned today that threat actors using Androxgh0st malware are building a botnet focused on cloud credential theft and using the stolen information to deliver additional malicious payloads.
- Sergiu Gatlan
- January 16, 2024
- 12:34 PM
- 0
Twilio discloses another hack from June, blames voice phishing

Cloud communications company Twilio disclosed a new data breach stemming from a June 2022 security incident where the same attackers behind the August hack accessed some customers' information.
- Sergiu Gatlan
- October 27, 2022
- 12:59 PM
- 0
Okta one-time MFA passcodes exposed in Twilio cyberattack

The threat actor behind the Twilio hack used their access to steal one-time passwords (OTPs) delivered over SMS to from customers of Okta identity and access management company.
- Ionut Ilascu
- August 28, 2022
- 01:15 PM
- 0
DoorDash discloses new data breach tied to Twilio hackers

Food delivery firm DoorDash has disclosed a data breach exposing customer and employee data that is linked to the recent cyberattack on Twilio.
- Lawrence Abrams
- August 26, 2022
- 03:30 PM
- 0
Twilio breach let hackers gain access to Authy 2FA accounts

Twilio's investigation into the attack on August 4 reveals that hackers gained access to some Authy user accounts and registered unauthorized devices.
- Ionut Ilascu
- August 26, 2022
- 12:20 PM
- 3
Twilio hackers hit over 130 orgs in massive Okta phishing attack

Threat analysts have discovered the phishing kit responsible for thousands of attacks against 136 high-profile organizations that have compromised 9,931 accounts.
- Bill Toulas
- August 25, 2022
- 10:53 AM
- 0
Twilio hack exposed Signal phone numbers of 1,900 users

Phone numbers of close to 1,900 Signal users were exposed in the data breach Twilio cloud communications company suffered at the beginning of the month.
- Ionut Ilascu
- August 15, 2022
- 05:46 PM
- 0
Twilio: 125 customers affected by data breach, no passwords stolen

Cloud communications giant Twilio, the owner of the highly popular two-factor authentication (2FA) provider Authy, says that it has so far identified 125 customers who had their data accessed during a security breach discovered last week.
- Sergiu Gatlan
- August 12, 2022
- 01:44 PM
- 0
Twilio discloses data breach after SMS phishing attack on employees

Cloud communications company Twilio says some of its customers' data was accessed by attackers who breached internal systems after stealing employee credentials in an SMS phishing attack.
- Sergiu Gatlan
- August 08, 2022
- 10:37 AM
- 0
"Eavesdropper" Vulnerability Exposes Millions of Private Conversations

Security researchers have discovered that tens of developers have left API credentials in hundreds of applications built around the Twilio service.
- Catalin Cimpanu
- November 09, 2017
- 01:51 PM
- 1