Weekly Cyber Security News 08/10/2021

A selection of this week’s more interesting vulnerability disclosures and cyber security news. For a daily selection see our twitter feed at #ionCube24. There was me at the early part of the week thinking not much earth shattering infosec the previous week and hoping for some excitement this week. And what happens? Yes something comes along. First being a happy day of no social media:

• Facebook Outage Drags Down Instagram, WhatsApp, Messenger, Oculus VR – They were all flat on their faces for hours on Monday, throwing off DNS error messages or other server-related errors.

Then we get a a major breach and what a breach it is:

• Twitch blames server error for massive data leak

In more mundane breach news, fingers point to yet another example of why SMS 2FA should be outlawed, or as the article points out more awareness that this isn’t the best option for users if other methods are available.

• MFA Glitch Leads to 6K+ Coinbase Customers Getting Robbed – Coinbase suspects phishing led to attackers getting personal details needed to access wallets but also blamed a flaw in its SMS-based 2FA.