SEC's X Account Compromised by SIM-Swapping Attack

The Securities and Exchange Commission (SEC) revealed that its official Twitter account was compromised in a SIM swapping attack, with the account not having multi-factor authentication (MFA) enabled at the time. This incident, which led to false claims about bitcoin ETF approvals, has raised concerns about the SEC's security practices and prompted investigations by various authorities. The lack of MFA made it easier for the account to be taken over, and questions remain about how the attackers knew which phone was associated with the account and the involvement of the telecom carrier.