Latest Tech News

Stay updated with the latest in technology, AI, cybersecurity, and more

Filtered by: sms Clear Filter

The MFA You Trust Is Lying to You – and Here's How Attackers Exploit It

Still getting login codes via text or authenticator apps? You’re not alone—and that’s a big problem. What used to feel like a smart security layer is now one of the easiest ways for attackers to gain access to your accounts. First we were told to use SMS for MFA. Then we were told: “Don’t use SMS for MFA, use an authenticator app instead.” And while that may seem like a step forward, it’s still fundamentally flawed. Authenticator apps do improve over SMS by avoiding message interception, but t

UK proposes greater regulation for Google's search practices

The UK might introduce new regulations for Google. The country's Competition and Markets Authority (CMA) has proposed designating the company's search services with "strategic market status" (SMS). In doing so, the regulatory body could direct Google to create fairer business rankings on search, for instance. The CMA launched an antitrust investigation into Google Search in January — its first probe under the UK's Digital Markets, Competition and Consumers (DMCC) Act. Concerns include search ad

Topics: cma google search sms uk

Whistleblower warning: 2FA codes sent via SMS are trivially easy to intercept

Weak Link: Two-factor authentication is designed to harden device security and make unauthorized access even trickier for bad actors. In the imperfect world we live in, however, there's almost always a weak link, and one popular delivery method for 2FA is no exception. Many implementations of two-factor authentication involve sending a one-time passcode to the end user via SMS. Once entered, the user is logged in and it's business as usual. The problem is the inherent weakness of SMS, and the f

Why SMS two-factor authentication codes aren't safe and what to use instead

kontekbrothers/Getty We've probably all received confirmation codes sent via text message when trying to sign into an account. Those codes are supposed to serve as two-factor authentication to confirm our identity and prevent scammers from accessing our accounts through a password alone. But who actually handles those SMS codes, and can those people be trusted? New reports from both Bloomberg and collaborative investigative newsroom Lighthouse Reports shed light on how and why text-based codes