<h4><strong>According to the SEC, the breach was a result of a sophisticated “SIM swap” attack, where the unauthorized party gained access to the account holder’s phone number through the telecom carrier, not the SEC’s internal systems. </strong></h4> 
<p>The SEC admitted that two-factor authentication (2FA) had been disabled for approximately six months leading up to the hack. Let’s explore more about SEC’s X Account Hack.</p> 
<h5><strong>SEC Discloses 2FA Disablement in SIM Swap Breach</strong></h5> 
<p>The <a href="https://www.sec.gov/secgov-x-account" target="_blank" rel="noopener">disclosure</a> highlights ongoing challenges in securing data and the persistent risk of SIM swap attacks for organizations. This is a method that is increasingly employed by cybercriminals to bypass security measures.</p> 
<blockquote class="twitter-tweet" data-width="550" data-dnt="true"> 
 <p lang="en" dir="ltr"><img src="https://s.w.org/images/core/emoji/14.0.0/72x72/1f6a8.png" alt="🚨" class="wp-smiley" style="height: 1em; max-height: 1em;">NEW: <a href="https://twitter.com/SECGov?ref_src=twsrc%5Etfw">@SECGov</a> provides update on its X account hack, saying 2FA had been disabled for around 6 months prior to the hack. </p> 
 <p>"While multi-factor authentication (MFA) had previously been enabled on the <a href="https://twitter.com/SECGov?ref_src=twsrc%5Etfw">@SECGov</a> X account, it was disabled by X Support, at the staff’s request, in July…</p> 
 <p>— Eleanor Terrett (@EleanorTerrett) <a href="https://twitter.com/EleanorTerrett/status/1749538862907437112?ref_src=twsrc%5Etfw">January 22, 2024</a></p>
</blockquote> 
<p><script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script></p> 
<p>The disabling of 2FA for such a prolonged period raises concerns about the SEC’s security protocols. 2FA is a critical layer of defense that adds an extra step beyond a password to verify the identity of the account holder. In the absence of 2FA, accounts become more vulnerable to unauthorized access.</p> 
<p>The SEC clarified that the breach was not a result of a flaw in its internal security systems but rather a compromise of the account holder’s phone number through the telecom company. SIM swap attacks involve fraudulently transferring a user’s phone number to a SIM card controlled by the attacker, giving them control over incoming calls and text messages.</p> 
<blockquote class="twitter-tweet" data-width="550" data-dnt="true"> 
 <p lang="en" dir="ltr">The <a href="https://twitter.com/SECGov?ref_src=twsrc%5Etfw">@SECGov</a> X account was compromised, and an unauthorized post was posted. The SEC has not approved the listing and trading of spot bitcoin exchange-traded products.</p> 
 <p>— U.S. Securities and Exchange Commission (@SECGov) <a href="https://twitter.com/SECGov/status/1744837121406349714?ref_src=twsrc%5Etfw">January 9, 2024</a></p>
</blockquote> 
<p><script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script></p> 
<p>The incident underscores the need for proactive adoption and maintenance of strong cybersecurity practices by organizations and individuals. This includes regular security audits, employee training, and the secure management of 2FA mechanisms.</p> 
<p><a href="https://www.patreon.com/altcoinbuzz" target="_blank" rel="noopener"><img decoding="async" class="aligncenter wp-image-124240" src="https://www.altcoinbuzz.io/wp-content/uploads/2023/09/image-7-1-1-300x37.jpg" sizes="(max-width: 714px) 100vw, 714px" srcset="https://www.altcoinbuzz.io/wp-content/uploads/2023/09/image-7-1-1-300x37.jpg 300w, https://www.altcoinbuzz.io/wp-content/uploads/2023/09/image-7-1-1-1024x127.jpg 1024w, https://www.altcoinbuzz.io/wp-content/uploads/2023/09/image-7-1-1-768x95.jpg 768w, https://www.altcoinbuzz.io/wp-content/uploads/2023/09/image-7-1-1-696x86.jpg 696w, https://www.altcoinbuzz.io/wp-content/uploads/2023/09/image-7-1-1-1068x132.jpg 1068w, https://www.altcoinbuzz.io/wp-content/uploads/2023/09/image-7-1-1.jpg 1197w" alt="" width="714" height="88"></a></p> 
<div class="youtube-embed" data-video_id="fb6DoeZ8zKM">
 <iframe title="How Many Stacks STX Do You Need to become a Crypto Millionaire in 2025 | Bitcoin L2" width="696" height="392" src="https://www.youtube.com/embed/fb6DoeZ8zKM?feature=oembed&amp;enablejsapi=1" frameborder="0" allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share" allowfullscreen></iframe>
</div> 
<p><strong>Disclaimer</strong><br> The information discussed by Altcoin Buzz is not financial advice. This is for educational, entertainment, and informational purposes only. Any information or strategies are thoughts and opinions relevant to the accepted levels of risk tolerance of the writer/reviewers and their risk tolerance may be different than yours. We are not responsible for any losses that you may incur as a result of any investments directly or indirectly related to the information provided. Bitcoin and other cryptocurrencies are high-risk investments so please do your due diligence. Copyright Altcoin Buzz Pte Ltd.</p> 
<p>The post <a href="https://www.altcoinbuzz.io/cryptocurrency-news/remember-secs-x-account-hack-this-is-what-happened/">Remember SEC’s X Account Hack? This is what Happened</a> appeared first on <a href="https://www.altcoinbuzz.io">Altcoin Buzz</a>.</p>

Remember SEC’s X Account Hack? This is what Happened

Altcoin Buzz

Други статии, публикувани на 23.01.2024 г.

Penambang Bitcoin Kian Antusias, Dogecoin Bangkit dan BlockDAG Jadi Incaran Investor

Best Crypto & Bitcoin Roulette Casinos 2024: Expert Reviews & Tips

Coinbase faces headwinds as Bitcoin and ETF interest dips, says JPMorgan

Kaspersky warns of new MacOS malware aiming at crypto wallets

Solana Dominates Ethereum, Bitcoin In NFT, Activity: What’s Next For SOL?

SpotOnChain Launched Extended Beta, aiming at fueling crypto communities’s unbounded growth with ...

Присъединете се към нашия безплатен бюлетин за ежедневни крипто актуализации!