On Monday,eroticized subjecthood Signal, often viewed as the most secure messaging app, shared that a security breach of its phone number verification service provider affected 1,900 of its users. Due to the breach, these users' phone numbers were exposed.
This Tweet is currently unavailable. It might be loading or has been removed.
According to Signal's post detailing the situation, the provider, Twilio, was targeted in a phishing attack. In Twilio's own postexplaining the situation, the company says it was a "sophisticated social engineering attack designed to steal employee credentials." The attack was successful in obtaining credentials from some of Twilio's employees. Twilio says that around 125 of its customers had data compromised during the attack. One of these affected customers is Signal.
On the bright side, Signal's reputation as the most secure messaging app is intact thanks to its service being 100 percent end-to-end encrypted. Without access to a Signal user's physical device, a bad actor could not access that user's messaging history. So, any sensitive information that was shared within messages on Signal have not been compromised. Profile data, contact list, and other data also was not compromised, again, thanks to Signal's design.
However, Signal warns that there were issues that arose for the users affected by the breach:
"For about 1,900 users, an attacker could have attempted to re-register their number to another device or learned that their number was registered to Signal. This attack has since been shut down by Twilio."
SEE ALSO: Apple delayed Telegram's iOS app update due to unauthorized use of its emojiAccording to Signal, one of those 1,900 users reported that their account was re-registered on another device without their authorization. Also, as Signal notes, most of its users were not affected at all by the security breach.
That there's been fairly little fallout from this security breach is a testament to Signal's security. But the breach is also a reminder of Signal's one glaring flaw: the requirement that a user registers their phone number to use the messaging service. Signal has previously hinted that it will soon allow people to use usernames instead of their phone number, but there is currently no scheduled roll out for that feature.
Topics Cybersecurity
The one number that shows how many people will vote todayKylie Jenner is almost certainly the lead singer of pop group Terror JrWoman goes into labor and still takes time to vote before giving birthAmerica, we need to fix those voting machines ASAPSerena Williams Snapchats s'more disappointmentAmy Schumer: people who don't vote are "steamy dumps"Trump supporter is so upset he seems to forget what New Zealand isSerena Williams Snapchats s'more disappointmentKylie Jenner is almost certainly the lead singer of pop group Terror JrWatch Katy Perry perform on the campaign trail for her pal, 'Hilly C' Everything you need to know about the OLED display rumored to be on the iPhone 12 Elon Musk: Tesla Battery Day tech won't be mass produced until 2022 Samsung Galaxy S20 FE gets thoroughly leaked in two videos Tesla EVs cost too much, so drivers turn to car The 'September' dance meme is back and we needed it after many a cloudy day Emmys 2020: Check out the full list of winners An Xbox mic drop: Microsoft acquires Bethesda Softworks Twitter will ask everyone if they read an article before they retweet it How to reduce remote learning burnout in kids Julia Louis
0.1556s , 9919.8125 kb
Copyright © 2025 Powered by 【eroticized subjecthood】Twilio hack results in security issue for 1,900 Signal users,Feature Flash