X blames SEC for account takeover as commission begins investigation

Recorded Future reports that the U.S. Securities and Exchange Commission's X (formerly Twitter) account was briefly compromised after an unknown actor gained control of a phone number associated with the account; X says its systems were not breached and the takeover exploited phone-number-based account recovery and the absence of two-factor authentication. The article highlights concurrent hijackings of other high-profile accounts, the rise in crypto-related scams on the platform, concerns about SIM-swap attacks tied to verification practices, and calls for users to enable MFA.