Box flaw allowed to bypass MFA and takeover accounts

A vulnerability in the implementation of multi-factor authentication (MFA) for Box allowed threat actors to take over accounts. A vulnerability in the implementation of multi-factor authentication (MFA) for Box allowed attackers to take over accounts without having access to the victim’s phone, Varonis researchers reported. Box develops and markets cloud-based content management, collaboration, and file-sharing tools for businesses. […]

The post Box flaw allowed to bypass MFA and takeover accounts appeared first on Security Affairs.

authentication bypass box breaking news bypass flaw hacking hacking news information security news it information security malware mfa pierluigi paganini takeover