Fake Calendly “Meta Careers” pages steal Facebook and Google logins
Fake Calendly pages posing as Meta interviews steal Facebook and Google passwords plus two-factor codes.
Stories per day · 30 days
2 RSS
Relatedai-agent1authentication-bypass1calendly1credential-theft1facebook1google1job-scam1meta1otp1pentesting1phishing1reflectiz1web-security1
7 stories, newest first · one card per story
Stories tagged #2fa
An AI Agent Found a Critical OTP Bypass in Production. The Attack Was the Easy Part.
Reflectiz says its AI pentest agent found a critical OTP bypass on a major insurer's website.
3
Product showcase: SimpleLogin keeps your email address private with aliases
Proton's SimpleLogin forwards mail through aliases so users can hide a primary email address.
3
Product showcase: mSecure makes one vault do more than remember passwords
Product showcase reviews mSecure password manager's AES-256 zero-knowledge vault with passkeys, 2FA storage, and multi-device sync options.
3
Legacy Lenovo login opens 5,000 Dropbox accounts to attackers
Dropbox warned about 5,000 users that attackers abused a legacy Lenovo ID login integration to access accounts and files between August 4 and 21.
3
WhatsApp Adds Stronger Security as Passkeys Hit 1 Billion
WhatsApp says 1 billion users now use passkeys, as it upgrades two-step verification to full passwords and adds context for calls from unknown numbers.
1
[20260807] - Core - MFA Authentication Bypass
Joomla fixed CVE-2026-73337, an MFA authentication bypass caused by insufficient state checks, affecting Joomla CMS 4.0.0-5.4.7 and 6.0.0-6.1.2.