Topic: two-factor authentication bypass
-
5-Year-Old FortiOS 2FA Flaw Actively Exploited, Fortinet Warns
A critical 2020 Fortinet FortiGate firewall vulnerability (CVE-2020-12812) is still being actively exploited, allowing attackers to bypass two-factor authentication by manipulating username case during login. Despite patches being available for over five years, exploitation continues, particularl...
Read More » -
Russian Hackers Bypass Two-Factor Authentication in New Attack
Russian hackers bypassed two-factor authentication (2FA) using social engineering, exploiting legitimate account features like Gmail's "app password" to target high-profile individuals. A British researcher, Keir Giles, was tricked by hackers posing as U.S. officials, who used forged documents an...
Read More »