Twilio

Unauthenticated Authy endpoint let attackers enumerate 33 million phone numbers

Twilio confirmed that threat actors used an unauthenticated endpoint to identify data tied to Authy two-factor app accounts, including phone numbers, after the ShinyHunters group claimed 33 million numbers. Twilio secured the endpoint and told users to update the app.