Connect with us

Technology

33 million Authy users exposed in authentication app's own security nightmare

Published

on

33 million Authy users exposed in authentication app's own security nightmare

A hacker claimed to have stolen 33 million phone numbers from U.S. messaging giant Twilio. The company confirmed to CyberGuy that threat actors got access to the data associated with its Authy two-factor authentication service.

Obtaining a list of phone numbers alone is not the biggest cyberattack, but it could still pose a threat to the owners of those numbers. 

Hackers may use these numbers to launch phishing attacks, send spam text messages or attempt SIM swapping. Twilio has since patched its app to avoid future security incidents and has also cautioned users.

GET SECURITY ALERTS, EXPERT TIPS – SIGN UP FOR KURT’S NEWSLETTER – THE CYBERGUY REPORT HERE

Illustration of a hacker at work (Kurt “CyberGuy” Knutsson)

Advertisement

What you need to know

On July 3, the hacker group known as ShinyHunters reportedly took to a hacking forum to boast about stealing 33 million cellphone numbers. Twilio said that the incident was “not a hack or breach” but rather the threat actors exploiting an “unauthenticated endpoint.” In simple terms, hackers exploited a specific part of Twilio’s system that didn’t require authentication.

The U.S. messaging giant confirmed that hackers were able to identify data associated with Authy accounts, including phone numbers, but did not specify how many accounts were affected. The company stated that there is no evidence indicating that the hackers gained access to Twilio’s systems or other sensitive data.

Twilio provided this statement to CyberGuy: “Twilio has detected that threat actors were able to identify data associated with Authy accounts, including phone numbers, due to an unauthenticated endpoint. We have taken action to secure this endpoint and no longer allow unauthenticated requests.

“We have seen no evidence that the threat actors obtained access to Twilio’s systems or other sensitive data. As a precaution, we are requesting all Authy users to update to the latest Android and iOS apps for the latest security updates and encourage all Authy users to stay diligent and have heightened awareness around phishing and smishing attacks.”

Advertisement

Illustration of hackers at work (Kurt “CyberGuy” Knutsson)

ANDROID USERS AT RISK AS BANKING TROJAN TARGETS MORE APPS

What do affected users need to do?

If you’ve been affected by the Twilio security incident, the first thing you need to do is download the latest version of the Authy app. Twilio has released a new version of the app that includes bug fixes and security updates. Android users can update the app from the Play Store, and iPhone users can head to the App Store.

You also need to be cautious of phishing attacks. While your Authy account itself is safe, hackers might use the phone number linked to your account to try some phishing tricks. This means they could contact you pretending to be from Authy or Twilio to trick you into giving away personal information.

Illustration of a hacker (Kurt “CyberGuy” Knutsson)

Advertisement

ANDROID BANKING TROJAN MASQUERADES AS GOOGLE PLAY TO STEAL YOUR DATA

5 steps to take to protect your privacy and personal data

While hackers can misuse your personal information in various ways, there are several steps you can take to prevent harm.

1. Have strong antivirus software: Android has its own built-in malware protection called Play Protect, but it’s not enough to stop all malicious software. Historically, Play Protect hasn’t been 100% foolproof at removing all known malware from Android phones. The best way to protect yourself from clicking malicious links that install malware that may get access to your private information is to have antivirus protection installed on all your devices. This can also alert you of any phishing emails or ransomware scams. Get my picks for the best 2024 antivirus protection winners for your Windows, Mac, Android and iOS devices.

2. Use an identity theft protection service: Identity theft companies can monitor personal information like your Social Security Number, phone number and email address and alert you if it is being sold on the dark web or being used to open an account. They can also assist you in freezing your bank and credit card accounts to prevent further unauthorized use by criminals.

CLICK HERE FOR MORE U.S. NEWS

Advertisement

One of the best parts of using some services is that they might include identity theft insurance of up to $1 million to cover losses and legal fees and a white-glove fraud resolution team where a U.S.-based case manager helps you recover any losses. See my tips and best picks on how to protect yourself from identity theft.

3. Invest in data removal services: While no service promises to remove all your data from the internet, having a removal service is great if you want to constantly monitor and automate the process of removing your information from hundreds of sites continuously over a longer period of time. Remove your personal data from the internet with my top picks here.

4. Use multifactor authentication: Enable two-factor authentication on your important accounts to add an extra layer of security beyond a password. This requires a second step, like a code sent to your phone, to log in.

5. Use a VPN: Consider using a VPN to protect against being tracked and to identify your potential location on websites that you visit. Many sites can read your IP address and, depending on their privacy settings, may display the city from which you are corresponding. A VPN will disguise your IP address to show an alternate location. For the best VPN software, see my expert review of the best VPNs for browsing the web privately on your Windows, Mac, Android and iOS devices.

HOW TO OUTSMART CRIMINAL HACKERS BY LOCKING THEM OUT OF YOUR DIGITAL ACCOUNTS

Advertisement

Kurt’s key takeaway

Authy is a two-factor authentication service that users trust, but a security lapse in its system reminds users that no service is foolproof. The service maker maintains that hackers do not have access to Authy accounts, which is a relief. Companies should invest more in security infrastructure to ensure that their customers’ sensitive data does not get compromised so easily.

How do you think companies should improve their security measures to prevent incidents like the Twilio security incident? Let us know by writing us at Cyberguy.com/Contact.

For more of my tech tips and security alerts, subscribe to my free CyberGuy Report Newsletter by heading to Cyberguy.com/Newsletter.

Ask Kurt a question or let us know what stories you’d like us to cover.

Advertisement

Follow Kurt on his social channels:

Answers to the most asked CyberGuy questions:

Copyright 2024 CyberGuy.com. All rights reserved.

Technology

Instagram is finally letting everyone reorganize their profile grid

Published

on

Instagram is finally letting everyone reorganize their profile grid

Nearly a year after it was announced, Instagram says it’s delivering the ability to rearrange the posts in your profile grid. It had been available to some people in test groups, but as of June 8th, it’s rolling out widely via the Android and iPhone mobile apps.

Until now, the posts on your Instagram profile have been locked in chronological order beyond the ability to pin three posts at the top, but once the feature is live on your account, you can long-press and drag posts freely, no matter how old they are. Any posts that are pinned will remain at the top.

Continue Reading

Technology

Robot pets with AI could soon live with you

Published

on

Robot pets with AI could soon live with you

NEWYou can now listen to Fox News articles!

A robot that follows you around the house may sound a little strange at first. Yet Colin Angle, the cofounder of iRobot and one of the people behind Roomba, is betting that the next big home robot may feel less like a machine and more like a companion.

His new company, Familiar Machines & Magic, has revealed its first robot concept called a Familiar. It is a pet-inspired, emotionally aware home robot designed to live with you, learn your routines and support healthier habits. “The next era of robotics is not just about dexterity or humanoid form. It is about machines that can build and sustain human connection,” Angle said.

That may sound great to some of you, and others not so much. Whatever your take, it raises some important questions too. Do you really want an AI-powered companion roaming around your home 24/7? Can a robot provide comfort without creating dependency? And will privacy hold up when a device can see, hear and remember what happens around you? Let’s take a closer look.

Join CyberGuy Live: Lock Down Your Phone in 30 Minutes (Saturday, June 13, 10 am ET)

  • Your phone holds your email, passwords, photos, banking apps and personal data. In this free, live online class, Kurt the CyberGuy will walk you step by step through simple phone security fixes you can do in real time. You’ll learn how to improve your privacy settings, spot the latest phone scams, use trusted security tools and walk away with a simple checklist to stay protected. Register here: CyberGuyLive.com.

AI HUMANOID ROBOT LEARNS TO MIMIC HUMAN EMOTIONS AND BEHAVIOR

Familiar Machines & Magic has revealed Familiar, an AI-powered home robot concept designed to learn routines and respond to human emotions. (Familiar Machines & Magic)

Advertisement

What is the Familiar AI robot pet?

A Familiar is a physically embodied AI robot built for human interaction. Unlike a chatbot on your phone, this robot has a body. It can move, react and express itself through animal-inspired behaviors.

The first version is a four-legged robot with a soft, touch-sensitive coat. It uses cameras, microphones, speakers and onboard AI to respond to people in real time. The company says it can read facial expressions, tone of voice and body language.

So, if you smile, it may tilt its head. If you seem stressed, it may nuzzle you. If you get excited, it may wiggle its tail. The goal is to build a warm presence that feels natural in your home. Familiar Machines & Magic says the robot is designed to support people through daily life rather than perform one simple task.

Why this AI robot pet feels more like a companion

Most home robots have focused on chores. Roomba vacuumed your floors. Other robots promised security patrols, video calls or entertainment. Familiar is doing something different. It is built to support your daily routines and respond to how you are feeling.

The company describes it as a companion that can encourage better habits. For example, it may notice that you have been doomscrolling and give you a gentle nudge. It could encourage movement, help engage kids in screen-free play or offer a non-judgmental presence when you need to vent. That makes the robot feel more like a pet than a device. Still, the company says it is meant to supplement your life, not replace people or real animals.

Advertisement

A WHEELED ROBOT MAY BEAT HUMANOIDS INTO YOUR HOME

How the Familiar AI robot learns your routines

The Familiar is designed to build memory over time. The more you interact with it, the more distinct its personality may become. That could mean it learns when your household eats dinner, when you usually relax or when you tend to fall into habits you want to break. Then it can react in small physical ways.

Instead of barking orders, it may use movement, sound and expression. A paw tap could remind you to move. A gentle approach could signal that it wants attention. A scared reaction could warn you if it senses an unsafe situation, such as being placed near heat.

This is where the idea gets interesting. The robot does not need to speak to communicate. In fact, Familiar Machines & Magic says the first Familiar currently does not talk. That restraint may be smart. A robot that acts through gestures may feel less intrusive than one that constantly chats.

The Familiar robot concept uses cameras, microphones, speakers and onboard AI to respond to facial expressions, tone of voice and body language. (Familiar Machines & Magic)

Advertisement

Why the Roomba creator’s new robot stands out

Colin Angle helped turn consumer robotics into a real business with iRobot. That gives this project extra weight because many social robots have come and gone without lasting success.

Robots such as Jibo, Anki’s Vector and other home companions generated excitement, but many struggled to keep people engaged after the novelty wore off.

Familiar Machines & Magic seems aware of that challenge. The company says the robot must build a long-term connection rather than offer a flashy demo. In other words, cuteness alone will not carry it. A Familiar has to keep earning its place in your home.

HOME ROBOT COOKS, CLEANS AND ORGANIZES YOUR LIFE

How Familiar handles privacy inside your home

A robot that sees and hears what happens inside your home naturally raises privacy questions. Familiar Machines & Magic says its AI runs on the device, so your private data does not need to stream constantly to the cloud.

Advertisement

The company also says data is stored on the robot, and you decide when it gets shared with the cloud. The robot should still work if you disconnect it from the internet, although you may miss out on new features.

That is the kind of privacy setup you want to see with a home robot. Still, you should read the fine print before bringing one into your house. Look for clear answers on what it records, how long it keeps that data, who can access it and how you can delete it.

Why AI robot pets could appeal to families and older adults

A Familiar could make sense for people who want a little extra support at home without adding another screen to the mix. Parents may use it to help pull kids into screen-free play. Someone living alone could feel a little more company in the house. Older adults may eventually get help with reminders, routines and companionship.

That last part could be where this type of robot really proves itself. It could gently encourage daily habits, check in through movement and sound and stay out of the way when needed. For homes where people want support without feeling watched or managed, that balance could make a real difference.

NEW MOBILE ROBOT HELPS SENIORS WALK SAFELY AND PREVENT FALLS

Advertisement

Colin Angle, cofounder of iRobot and one of the creators behind Roomba, is betting home robots could become companions rather than chore machines. (Familiar Machines & Magic)

When will the Familiar AI robot be available and what will it cost?

Familiar Machines & Magic has not announced a price or release date yet. The company also says this reveal isn’t a commercial product launch.

So, for now, this is more of a first look at where the company is headed. The real test will come when people can actually bring one home. Can it move safely around a busy house? Will people still use it after the first week? Will the privacy controls be clear enough? And will the price make sense for families?

Those are the questions that will determine whether Familiar becomes something people truly want in their homes, or something that looks great in a demo but never becomes part of our daily lives.

Kurt’s key takeaways

Familiar is one of the more interesting home robot ideas we have seen in years because it moves beyond chores and into emotional support. That is exciting, but it is also a much harder promise to keep. The Roomba connection gives this project credibility, especially since Colin Angle knows how difficult it is to make robots useful in real homes. Still, Familiar Machines & Magic has to prove this robot can stay helpful after the novelty wears off. If the company can balance usefulness, privacy, safety and emotional connection, Familiar could point to a new future for AI at home.

Advertisement

CLICK HERE TO DOWNLOAD THE FOX NEWS APP

Would you want an emotionally aware AI robot in your home, or would you rather keep that kind of technology out of your personal space? Let us know by writing to us at CyberGuy.com.

Sign up for my FREE CyberGuy Report

  • Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox.
  • For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com trusted by millions who watch CyberGuy on TV daily.
  • Plus, you’ll get instant access to my Ultimate Scam Survival Guide free when you join.

Copyright 2026 CyberGuy.com. All rights reserved.

Continue Reading

Technology

WWDC protesters want Apple to ban Elon Musk’s apps

Published

on

WWDC protesters want Apple to ban Elon Musk’s apps

Apple’s big developer conference is today, and protesters are using the occasion to call on the company to remove “nudify apps” from the App Store and pull “known” child sexual abuse material from iCloud.

Outside the visitors center at Apple’s Cupertino campus, protesters have put up a large sign saying “Apple is powered by child sexual abuse” and asking incoming CEO John Ternus, “What will you do?” The protesters come from UltraViolet, a women’s advocacy group, and Heat Initiative, a group that aims to “hold tech companies accountable for enabling and profiting from child sexual abuse.”

Apple and Google came under significant scrutiny earlier this year for continuing to keep apps like xAI’s Grok on their app stores even though users were able to make nonconsensual sexualized deepfakes. In pamphlets distributed at the protest, the organizations say that “at least 47 nudify apps have been found on Apple’s App Store” and that “Apple has made an estimated $117 million minimum from nudify apps,” including “an estimated $35+ million from Grok alone,” citing data from the Tech Transparency Project. UltraViolet also has a website dedicated to its protest today.

Apple previously scrapped plans to scan photos saved to iCloud for child sexual abuse imagery over privacy concerns.

Apple didn’t immediately reply to a request for comment.

Advertisement
Continue Reading
Advertisement

Trending