News

An SMS routing company's exposed database was left online without a password, spilling 2FA codes and password reset links to the open web.