A LEAKY DATABASE SPILLED 2FA CODES FOR THE WORLD’S TECH GIANTS

Summary from the TLDR InfoSec newsletter

A database belonging to YX International, which routes millions of SMS messages daily, was left exposed online without a password. The database contained sensitive one-time passcodes that grant access to accounts on Facebook, Google, and TikTok. The company secured the database after being contacted by a security researcher.