2FA

Facebook isn’t letting you opt-out of having people search for you by your phone number

If you really must use Facebook, don't give it your phone number - not even for 2FA.
Graham Cluley
2 min read

Smashing Security #117: SWATs on a plane

Why is Tampa's mayor tweeting about blowing up the airport? Are hackers trying to connect with you via LinkedIn? And has Maria succeeded in...
Graham Cluley
1 min read

The man suing Apple over two-factor authentication has ‘previous’

Many have been baffled by Jay Brodsky's legal action against Apple, including his claim that it takes between two and five minutes for him...
Graham Cluley
1 min read

Apple sued because two-factor authentication… oh, I give up

An American man is bringing a class action against Apple, complaining that two-factor authentication (2FA) on an iPhone or Mac takes too much time.
Graham Cluley
34 sec read

Smashing Security #115: Love, Nests, and is 2FA destroying the world?

Is two factor authentication such a pain in the rear end that it's costing the economy millions? Do you feel safe having a Google...
Graham Cluley
2 min read

Some OkCupid users have their accounts compromised. Why don’t more dating apps use 2FA?

It's easy to imagine the harm that could result from a hacker reading users' private communications on a dating app. So it's a...
Graham Cluley
2 min read

Automated phishing attack tool bypasses 2FA protection

Modlishka may help raise awareness of the danger of reverse proxy phishing attacks, but it's easy to imagine that many criminals will be tempted...
Graham Cluley
1 min read

Multi-factor failure locks out Microsoft Office 365 and Azure users

Users of Microsoft Azure and Office 365 are struggling to access their accounts today, due to a multi-factor authentication malfunction.
Graham Cluley
45 sec read

Smashing Security #103: An Instagram nightmare, crazy iPhone deaths, and election hack claims

One travel blogger finds you don't have to be Kylie Jenner to be targeted by an Instagram hacker. When 40 iPhones at a hospital...
Graham Cluley
2 min read

Smashing Security #099: Passwords – A Smashing Security splinter (replay)

Passwords - everything you need to know about how to make them safer, and better secure your online accounts. In this replay of our...
Graham Cluley
1 min read

Your business should be more afraid of phishing than malware

If you were to make a list of the most common causes of security breaches, it is phishing attacks that would surely dominate. Read more...
Graham Cluley
0 sec read

Instagram finally supports third-party authentication apps for greater account security

Instagram has entered the 21st century, and finally added support for third-party 2FA apps like Google Authenticator, Duo Mobile, and Authy. Please turn it on.
Graham Cluley
1 min read

Reddit hacked – but don’t give up on 2FA just yet

Yes, SMS-based 2FA can be intercepted by someone determined to hack into your account. But it's also better than not having any multi-factor authentication in...
Graham Cluley
0 sec read

Smashing Security #088: PayPal’s Venmo app even makes your drug purchases public

Not one of Google's 85,000 employees has had their accounts compromised by phishing in a year.  How have they done it? Find out in...
Graham Cluley
1 min read

Twitter gets physical – with support for hardware security keys

Twitter has given millions of users a way of making their accounts even harder to hack, with the introduction of support for physical keys. Read...
Graham Cluley
0 sec read

Facebook SMS spam risks spoiling adoption of 2FA

It's hard enough getting people to turn on 2FA without sites using it to send non-security notifications.
Graham Cluley
1 min read