Attackers were able to obtain Authy customers’ phone numbers and other data via an unauthenticated endpoint, which has since been secured, but there has been no indication of further breaches of Twilio’s systems and sensitive data, according to Twilio spokesperson Kari Ramirez. Authy users have been urged to immediately update to the latest versions of the app on Android and iOS to prevent compromise.

Source: SC Magazine