WHEN MFA ISN’T ACTUALLY MFA

Summary from the TLDR InfoSec newsletter

Retool faced an unauthorized access issue involving 27 cloud customers due to a spear-phishing attack via text message. The breach started with an employee's compromised Google account, underscoring the need for employee training and strong defense measures.