Paypal Disables Two Factor From Mobile
ID: ef3b5091-dfc5-58bd-bb5e-5fbbbd7a885c
STIX ID: report--ef3b5091-dfc5-58bd-bb5e-5fbbbd7a885c
Feed Name: Security Ledger
Threat Score
PayPal has temporarily disabled mobile-application logins that rely on its Security Key two-factor authentication after DUO Labs researcher Zach Lanier disclosed a flaw in a PayPal mobile API that can allow an attacker who has a user’s username and password to bypass the second factor. PayPal says 2FA remains operational across most product experiences, users can use the mobile website, and the company relies on additional fraud-detection controls while it works on a fix.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.