Skip to content

Get notified

Get an email when a new major security incident drops. No spam, unsubscribe any time.

Only used for pwn.watch incident emails. Protected by Cloudflare Turnstile.

← Live incidents

Aug 27, 2023

1 new incident, 0 with updates.

Started

  • ClosedHighNo fix needed

    Retool breach: SMS phishing, deepfaked voice call and synced MFA codes

    An attacker phished a Retool employee by SMS, then called them with a deepfaked voice to get an MFA code. Because Google Authenticator synced codes to the employee's Google account, the attacker got their MFA codes too, and took over 27 cloud customer accounts, all in crypto.

    Retool (cloud)Closed Sep 13, 2023