Researcher received a $27,000 bounty for 2FA bypass bug in Facebook and InstagramSecurity Affairs·Jan 30, 14:40 UTC · Jan 30, 2023Vulnerability30
npm enrolls Top 100 package maintainers into mandatory 2FAThe Record·Jan 17, 00:00 UTC · Jan 17, 2023Malware30
PyPI Repository Enforces 2FA for Critical Python ProjectsInfosecurity Magazine·Jul 11, 16:05 UTC · Jul 11, 2022Industry155
2FA bypass in cPanel potentially exposes tens of millions of websites to hackSecurity Affairs·Nov 24, 23:17 UTC · Nov 24, 2020Vulnerability42
Zoom Adds 2FA Feature to Further Secure PlatformInfosecurity Magazine·Sep 11, 11:00 UTC · Sep 11, 2020Industry30
Twitter allows users to use 2FA without a phone numberSecurity Affairs·Nov 24, 15:18 UTC · Nov 24, 2019Industry30
Reddit Breach Highlights Limits of SMS-Based AuthenticationKrebs on Security·Aug 15, 00:00 UTC · Aug 15, 2018Data breach57
It finally happened: Criminals exploit SS7 vulnerabilities, prompting concerns about 2FACyberScoop·May 8, 18:32 UTC · May 8, 2017Vulnerability in the wild60
Supply chain attack targets npm, +2 Billion weekly npm downloads exposedSecurity Affairs·Sep 9, 18:26 UTC · Sep 9, 2025Malware42
Product showcase: 2FAS Auth - Free, open-source 2FA for iOSHelp Net Security·Apr 23, 04:23 UTC · Apr 23, 2026Industry30
Product showcase: Proton Authenticator is an end-to-end encrypted, open source 2FA appHelp Net Security·Apr 23, 04:20 UTC · Apr 23, 2026Industry30
New Pixnapping Android Flaw Lets Rogue Apps Steal 2FA Codes Without PermissionsThe Hacker News·Oct 20, 18:54 UTC · Oct 20, 2025Exploit / PoC in the wildCVE-2025-4856160
Russian hackers bypass 2FA by annoying victims with repeated push notificationsThe Record·Dec 21, 00:00 UTC · Dec 21, 2022Vulnerability42
Rampant Kitten 's arsenal includes Android malware that bypasses 2FASecurity Affairs·Sep 18, 18:07 UTC · Sep 18, 2020Malware42
Phishing attacks aimed at bypassing Gmail, Yahoo 2FA at scaleSecurity Affairs·Dec 25, 20:14 UTC · Dec 25, 2018Phishing & fraud30
Facebook now supports 2FA via authenticator appsHelp Net Security·May 29, 00:00 UTC · May 29, 2018Industry30
Authorities pull plug on Tycoon 2FA phishing-as-a-service platformHelp Net Security·Mar 5, 00:00 UTC · Mar 5, 2026Phishing & fraud42
Cybercriminals are scaling phishing attacks with ready-made kitsHelp Net Security·Jan 8, 00:00 UTC · Jan 8, 2026Phishing & fraud30
New Advanced Phishing Kits Use AI and MFA Bypass Tactics to Steal Credentials at ScaleThe Hacker News·Dec 12, 18:36 UTC · Dec 12, 2025Phishing & fraud30
X Warns Users With Security Keys to Re-Enroll Before November 10 to Avoid LockoutsThe Hacker News·Oct 27, 16:40 UTC · Oct 27, 2025Industry30
Spoutible API exposed encrypted password reset tokens, 2FA secrets of usersHelp Net Security·Feb 6, 00:00 UTC · Feb 6, 2024Threat actor45
GitHub fixed serious npm registry vulnerability, will mandate 2FA use for certain accountsHelp Net Security·Nov 17, 00:00 UTC · Nov 17, 2021Vulnerability30
ManageEngine now supports two-factor authentication for macOS systemsHelp Net Security·Aug 15, 00:00 UTC · Aug 15, 2019Policy & legal55
npm Adds 2FA-Gated Publishing and Package Install Controls Against Supply Chain AttacksThe Hacker News·May 24, 08:15 UTC · May 24, 2026Industry142
Zoom and GitLab Release Security Updates Fixing RCE, DoS, and 2FA Bypass FlawsThe Hacker News·Jan 21, 15:42 UTC · Jan 21, 2026Vulnerability in the wildCVE-2026-22844CVE-2025-13927CVE-2025-13928+3 CVEs60
Five-year-old Fortinet FortiOS SSL VPN flaw actively exploitedSecurity Affairs·Dec 25, 19:40 UTC · Dec 25, 2025Ransomware in the wildCVE-2020-12812CVE-2018-13379CVE-2019-559160
Sneaky 2FA Phishing Kit Adds BitB Pop-ups Designed to Mimic the Browser Address BarThe Hacker News·Nov 19, 08:39 UTC · Nov 19, 2025Phishing & fraud30
Axios Abuse and Salty 2FA Kits Fuel Advanced Microsoft 365 Phishing AttacksThe Hacker News·Sep 10, 09:40 UTC · Sep 10, 2025Phishing & fraud55
Aegis Authenticator: Free, open-source 2FA app for AndroidHelp Net Security·Jul 7, 00:00 UTC · Jul 7, 2025AI safety & security30
Booking.com Phishers May Leave You With ReservationsKrebs on Security·Nov 1, 21:57 UTC · Nov 1, 2024Malware30
Twitter Limits SMS-Based 2-Factor Authentication to Blue Subscribers OnlyThe Hacker News·Feb 18, 11:25 UTC · Feb 18, 2023Industry30
Google to require 2FA and a physical address from Android app devsThe Record·Jan 18, 00:00 UTC · Jan 18, 2023Malware30
Google to enable 2FA for all users, add privacy labels to Android appsThe Record·Dec 9, 00:00 UTC · Dec 9, 2022Vulnerability30
Threat actors exploit a flaw in Coinbase 2FA to steal user fundsSecurity Affairs·Oct 2, 16:30 UTC · Oct 2, 2021Threat actor57
Twitter Updates 2FA to Enable Use of Multiple Security KeysInfosecurity Magazine·Mar 16, 13:15 UTC · Mar 16, 2021Industry30
New Attack Could Let Hackers Clone Your Google Titan 2FA Security KeysThe Hacker News·Jan 8, 19:59 UTC · Jan 8, 2021Exploit / PoCCVE-2021-301150
Week in review: Drupal-based sites open to attack, cPanel 2FA bypass vulnerabilityHelp Net Security·Nov 29, 00:00 UTC · Nov 29, 2020VulnerabilityCVE-2020-400660