Hackers can steal 2FA codes and private messages from Android phonesArs Technica · Security·Oct 15, 00:00 UTC · Oct 15, 2025Vulnerability30
Fortinet Warns of Active Exploitation of FortiOS SSL VPN 2FA Bypass VulnerabilityThe Hacker News·Jan 3, 08:24 UTC · Jan 3, 2026Vulnerability in the wildCVE-2020-1281260
Researcher received a $27,000 bounty for 2FA bypass bug in Facebook and InstagramSecurity Affairs·Jan 30, 14:40 UTC · Jan 30, 2023Vulnerability30
2FA bypass in cPanel potentially exposes tens of millions of websites to hackSecurity Affairs·Nov 24, 23:17 UTC · Nov 24, 2020Vulnerability42
It finally happened: Criminals exploit SS7 vulnerabilities, prompting concerns about 2FACyberScoop·May 8, 18:32 UTC · May 8, 2017Vulnerability in the wild60
Russian hackers bypass 2FA by annoying victims with repeated push notificationsThe Record·Dec 21, 00:00 UTC · Dec 21, 2022Vulnerability42
GitHub fixed serious npm registry vulnerability, will mandate 2FA use for certain accountsHelp Net Security·Nov 17, 00:00 UTC · Nov 17, 2021Vulnerability30
Zoom and GitLab Release Security Updates Fixing RCE, DoS, and 2FA Bypass FlawsThe Hacker News·Jan 21, 15:42 UTC · Jan 21, 2026Vulnerability in the wildCVE-2026-22844CVE-2025-13927CVE-2025-13928+3 CVEs60
Google to enable 2FA for all users, add privacy labels to Android appsThe Record·Dec 9, 00:00 UTC · Dec 9, 2022Vulnerability30
Week in review: Drupal-based sites open to attack, cPanel 2FA bypass vulnerabilityHelp Net Security·Nov 29, 00:00 UTC · Nov 29, 2020VulnerabilityCVE-2020-400660
cPanel 2FA bypass vulnerability can be exploited through brute forceHelp Net Security·Nov 25, 00:00 UTC · Nov 25, 2020Vulnerability55
After Shai-Hulud, GitHub tightens npm publishing securityHelp Net Security·Sep 23, 00:00 UTC · Sep 23, 2025Vulnerability30
G Suite admins can now disable SMS and voice 2FAHelp Net Security·Dec 14, 13:45 UTC · Dec 14, 2023Vulnerability30
Facebook to pay hackers up to $300,000 to uncover remote code execution bugsThe Record·Jan 9, 00:00 UTC · Jan 9, 2023Vulnerability42
Critical Copilot vulnerability allowed hackers to steal 2FA code from usersArs Technica · Security·Jun 15, 00:00 UTC · Jun 15, 2026Vulnerability55
ThreatsDay Bulletin: $15B Crypto Bust, Satellite Spying, BillionThe Hacker News·Oct 15, 00:00 UTC · Oct 15, 2025Vulnerability55
PSD2 and strong customer authentication: Are all elements equal?Help Net Security·May 6, 00:00 UTC · May 6, 2019Vulnerability30
LastPass vulnerability 'beats the entire purpose' of twoCyberScoop·Apr 20, 22:27 UTC · Apr 20, 2017Vulnerability in the wild60
Banking Web Injects Are Top Cyber Threat for Financial SectorRecorded Future·Nov 21, 00:00 UTC · Nov 21, 2025Vulnerability42
iOS 18 settings to lock down your privacy and securityHelp Net Security·Apr 15, 11:37 UTC · Apr 15, 2025Vulnerability30
2-Factor Authentication Bypass Flaw Reported in cPanel and WHM SoftwareThe Hacker News·Nov 25, 07:14 UTC · Nov 25, 2020Vulnerability30
Review: Netsparker Enterprise web application scannerHelp Net Security·Oct 19, 00:00 UTC · Oct 19, 2020Vulnerability130
ThreatsDay Bulletin: SMS Blaster Busts, OpenEMR Flaws, 600K Roblox Hacks and 25 More StoriesThe Hacker News·May 1, 07:21 UTC · May 1, 2026VulnerabilityCVE-2019-0708147
ThreatsDay Bulletin: RustFS Flaw, Iranian Ops, WebUI RCE, Cloud Leaks, and 12 More StoriesThe Hacker News·Jan 8, 16:52 UTC · Jan 8, 2026Vulnerability in the wildCVE-2024-36401CVE-2007-0671CVE-2002-036760
Unpacking Passkeys Pwned: Possibly the most specious research in decadesArs Technica · Security·Aug 28, 13:00 UTC · Aug 28, 2025Vulnerability30
Your smart home may not be as secure as you thinkHelp Net Security·Apr 15, 11:30 UTC · Apr 15, 2025Vulnerability42
WordPress Mandates Two-Factor Authentication for Plugin and Theme DevelopersThe Hacker News·Sep 12, 04:57 UTC · Sep 12, 2024Vulnerability42
Bitwarden Authenticator protects online services and applicationsHelp Net Security·May 2, 00:00 UTC · May 2, 2024Vulnerability55
Most people still rely on memory or pen and paper for password managementHelp Net Security·Apr 26, 00:00 UTC · Apr 26, 2024Vulnerability55
Thousands of npm accounts use email addresses with expired domainsThe Record·Jan 17, 00:00 UTC · Jan 17, 2023Vulnerability42
Meta's Bug Bounty Program Shows $2m Awarded in 2022Infosecurity Magazine·Dec 16, 17:00 UTC · Dec 16, 2022Vulnerability42
FBI: Millions in losses resulted from attacks against Healthcare payment processorsSecurity Affairs·Sep 15, 08:48 UTC · Sep 15, 2022Vulnerability30
A small number of Crypto.com users reported suspicious activity on their walletsSecurity Affairs·Jan 18, 05:37 UTC · Jan 18, 2022Vulnerability30
Mirantis Container Cloud enables businesses to build and operate container and VM clouds anywhereHelp Net Security·Apr 21, 00:00 UTC · Apr 21, 2021Vulnerability55
Metro Bank is the first bank that disclosed SS7 attacksSecurity Affairs·Feb 4, 09:06 UTC · Feb 4, 2019Vulnerability30
Instagram Adds 3 New Security Tools to Make its Platform More SecureThe Hacker News·Aug 29, 08:43 UTC · Aug 29, 2018Vulnerability30
Researchers steal bitcoin by exploiting SS7 vulnerabilitiesCyberScoop·Sep 19, 17:50 UTC · Sep 19, 2017Vulnerability in the wild60