Twitter's Two-Factor Authentication System Experiencing Issues

In recent days, users of the popular social media platform Twitter have been experiencing issues with their two-factor authentication (2FA) system. This potentially exposes accounts to a password reset attack or account takeover through password stuffing. According to reports, the vulnerability allows hackers to spoof the registered phone number and disable 2FA.

When attempting to access an account, users receive an automated response stating that 'Your phone has been removed and SMS 2FA has been disabled from all accounts.' This is a serious concern for those who rely on this security measure to protect their Twitter accounts.

To make matters worse, it appears that the system has another vulnerability: when texting 'STOP' to the Twitter verification service, the service turns off SMS two-factor authentication. This additional issue adds to the growing concerns surrounding Twitter's 2FA system.

The issues with Twitter's 2FA system are likely a result of the company's recent changes and updates under new owner Elon Musk. Engineers, operations specialists, IT staff, and security teams have been stretched thin attempting to adapt Twitter's offerings and build new features in line with Musk's agenda.

In addition to the 2FA issues, users have been self-reporting other problems on Twitter since the weekend. On at least some accounts, authentication texts are hours delayed or not coming at all. Not all users are experiencing these issues, however, and those who rely on an authenticator app or physical authentication token may not be affected.

Twitter has acknowledged intermittent problems with its 2FA system, and users are advised to take extra precautions to secure their accounts until the issues are resolved. It is essential for Twitter to address these vulnerabilities promptly to prevent potential security breaches and maintain user trust in the platform.

Titan 2fa