Twilio says hackers identified cell phone numbers of two-factor app Authy users

Twilio confirmed that threat actors were able to identify phone numbers associated with Authy accounts by exploiting an unauthenticated endpoint, with a hacker group claiming a 33 million–number exposure; Twilio says the endpoint has been secured, there is no evidence of broader system access, and users are urged to update apps and watch for phishing/smishing.