Millions of User Accounts Potentially Exposed as SMS Routing Company Leaves Database Unsecured

By Shakir Bukhari

 


Millions of users of popular platforms like Facebook, Google, TikTok, and WhatsApp may have had their accounts compromised due to a security lapse by an SMS routing company. The company, YX International, left an internal database containing sensitive information, including two-factor authentication (2FA) codes and password reset links, exposed on the internet without a password.



How did this happen? YX International, which processes millions of SMS messages daily, failed to secure one of its internal databases. This meant anyone with the database's IP address could access it using a simple web browser. Security researcher Anurag Sen discovered the exposed database and reported it to TechCrunch, which helped identify the owner and bring the issue to light.



What information was exposed? The database contained the contents of text messages sent to users, including:

  • Two-factor authentication (2FA) codes: These temporary codes are used as an extra layer of security during login attempts.
  • Password reset links: These links allow users to reset their passwords if they forget them.

The good news is that these codes and links typically expire within minutes, making them less valuable to potential attackers. However, the incident highlights the risks associated with SMS-based 2FA. SMS messages are inherently insecure and can be intercepted or compromised.



What should you do? While the immediate risk from the exposed database is likely low, it's still a good idea to take steps to improve your account security:

  • Enable stronger forms of 2FA: If available, consider using an authentication app or a physical security key instead of SMS-based 2FA. These methods are generally more secure than SMS.
  • Be cautious of suspicious links: Don't click on links in emails or text messages from unknown senders, even if they appear to be from legitimate companies.
  • Use strong passwords: Create unique and complex passwords for all your online accounts. Consider using a password manager to help you create and store strong passwords.



This incident serves as a reminder of the importance of cybersecurity vigilance. Companies have a responsibility to protect user data, and users need to be proactive in safeguarding their accounts. By taking steps to improve your online security, you can help minimise the risk of falling victim to cyberattacks.

Shakir Bukhari

https://www.facebook.com/groups/1085388718508013


Comments

  1. Data & StatisticsMarch 7, 2024 at 12:37 PM

    It's also a reminder to users to be vigilant about their online security and take steps to protect their accounts. By using strong passwords, enabling two-factor authentication, and being cautious of suspicious links, you can help keep your accounts safe from unauthorized access.

    ReplyDelete

Post a Comment

Popular posts from this blog

YouTube's Secret AI Makeover: Innovation or Overstep? Why Creators Are Furious

By Shakir Bukhari
Image
  If you’ve been uploading YouTube Shorts lately and something about your video looks… different, you’re not imagining things. YouTube is facing a wave of backlash after it was revealed that the platform has been   secretly applying AI-driven enhancements to Shorts videos without creators’ consent . While the intent may have been to improve video quality and optimise playback, the lack of transparency has creators furious and for good reason. This controversy has sparked a heated debate about  AI ethics, creative control, and the future of content authenticity . Let’s break it down. What’s Actually Happening? Over the past few weeks, creators have begun noticing subtle yet noticeable changes in their Shorts after upload. Videos appeared sharper, colours more vibrant, and even faces slightly smoother. These tweaks weren’t part of the original upload; they were  automated AI enhancements applied by YouTube . According to YouTube, the experiment includes: Upscaling reso...
Read more

ChatGPT’s New Unified View: Voice, Live Transcripts & Maps — Speak, See, and Scan in One Chat

By Shakir Bukhari
Image
  OpenAI has reshaped how we talk to AI: ChatGPT now blends voice, live transcripts, and visual outputs (like maps and images) directly inside the regular chat window. That means you can speak naturally, watch a running transcript appear, and see interactive visuals, all inside the same conversation thread. This update cuts friction, boosts accessibility, and moves ChatGPT closer to a true multimodal assistant. Why this matters This change removes the old “voice-only” silo where audio lived on a separate screen. Now, voice input and audio responses live alongside the chat history and any visuals the model produces, so follow-ups, maps, and previous context are always visible while you talk. For practical tasks (directions, travel planning, hands-free research), that continuity is a big usability win. Compatibility & availability Platforms: The integrated voice experience is rolling out across mobile (iOS and Android) and the web. Rollout timing: The update began rolling out in ...
Read more

Google Confirms Gmail Spam Filter Glitch: Why Your Inbox Is Flooded and How to Fix It

By Shakir Bukhari
Image
  I f you woke up recently to a "Primary" inbox overflowing with promotional ads, newsletters, and suspicious spam that usually stays tucked away in the shadows, you aren’t alone. In what has become one of the most significant technical disruptions for the platform in recent years, Google has officially confirmed a widespread Gmail filtering issue causing chaos for millions of users worldwide. For a service that prides itself on using advanced AI to shield users from digital clutter, this sudden "spam-pocalypse" serves as a stark reminder of how much we rely on silent algorithms to keep our digital lives manageable. What was once neatly organised into Primary, Promotions, and Spam tabs suddenly turned into a Wild West of misclassified messages, sparking frustration and raising serious questions about the reliability of automated email systems. What’s Going Wrong With Gmail? The issue isn't a total outage; users can still send and receive mail, but the "brai...
Read more