Discussion

• @jack @jack on x

  Tough day for us at Twitter. We all feel terrible this happened. We're diagnosing and will share everything we can when we have a more complete understanding of exactly what happened. 💙 to our teammates working hard to make this right.

• @twittersupport @twittersupport on x

  We are aware of a security incident impacting accounts on Twitter. We are investigating and taking steps to fix it. We will update everyone shortly.

• @twittersupport @twittersupport on x

  You may be unable to Tweet or reset your password while we review and address this incident.

• @tylerwinklevoss Tyler Winklevoss on x

  WARNING: @Gemini's twitter account, along with a number of other crypto twitter accounts, has been hacked. This has resulted in @Gemini, @Coinbase, @Binance, and @Coindesk, tweeting about a scam partnership with CryptoForHealth. DO NOT CLICK THE LINK! These tweets are SCAMS.

• @neal_katyal Neal Katyal on x

  Imagine if this hack happened on November 3, with a different set of messages than one seeking bitcoin. https://twitter.com/...

• @oneunderscore__ Ben Collins on x

  Sorry I'm not over this, but I've seen nothing to suggest that these hackers were prevented from seeing pretty much any account's DMs. From what I can tell, they did a password reset, which would leave them with full access to hacked accounts. They were in Elon Musk's for hours.

• @5blocks @5blocks on x

  Following yesterday's hack of prominent Twitter accounts, Google removed the search page feature showing individual Tweets for brands, presumably to avoid giving the hack exposure. Buckle up for short term fluctuations in search while Twitter restores order. attn: @rustybrick

• @jack @jack on x

  bitcoin @BubbaWallace https://twitter.com/...

• @alexstamos Alex Stamos on x

  There are many changes that Twitter can make to reduce the risk from customer service functions, such as creating two-person flows and performing risk-based auth. No coverage of this issue should ignore that major mobile providers are still struggling with stopping SIM swaps.

• @joshconstine Josh Constine -SignalFire on x

  The Twitter hack proves you don't need DeepFakes AI to start a world war, just an understanding of who people follow blindly

• @alexstamos Alex Stamos on x

  Also, it's impossible to describe the chaos inherent in dealing with the account lifecycle issues of the general public. The breadth of ways people lock themselves out of services that are critical to their lives is breathtaking, and we can't just ignore those folks.

• @jason_koebler Jason Koebler on x

  Twitter just locked my account and made me delete a tweet about how this hack worked

• @ydklijnsma Yonathan Klijnsma on x

  Leveraging @RiskIQ's datasets we have identified more infrastructure tied to the current cryptocurrency scammers impacting @elonmusk , @billgates, etc. This is research data, validate before taking action, it might identify new targets also. IOCs: https://pastebin.com/...

• @alexstamos Alex Stamos on x

  What we can do is to limit the exposure of high-risk accounts, create additional security friction and reduce the immediate impact of a successful account takeover (disabling data export and DMs for 24hrs, for example).

• @duncan Duncan Davidson on x

  🔒 If you leverage Twitter as an identity provider to log into other services, I think right now is a good time to re-evaluate that decision.

• @alexstamos Alex Stamos on x

  If we want our consumer-facing services to be more secure, we are going to have to accept more friction in our interactions with our important providers and not crush CSRs under metrics that only measure speed and customer satisfaction.