Hackers have managed to compromise a telephony provider for Duo, the Cisco-owned company providing secure access solutions, and steal MFA (multi-factor authentication) SMS message logs of Duo customers. About the attack The unnamed provider – one of two that Duo uses – was breached via compromised/phished employee credentials, which allowed the attackers to gain access to the company’s internal systems on April 1, 2024. “The threat actor downloaded message logs for SMS messages that were … More →

The post Cisco Duo provider breached, SMS MFA logs compromised appeared first on Help Net Security.