Zapho Security Lab
zaph0@blog: ~
zaph0@blog:~$▊
try: help
./posts --recent
Authy OneTouch MFA Bypass via Leaked Pusher Secret
2026-07-30A client-side leaked Pusher app secret allows forging MFA approval events on public channels.
MFA Bypass via Leaked Pusher App Secret in Authy OneTouch Integration
2026-07-30A Pusher application secret shipped client-side allows forging authenticated MFA approval events on public channels, potentially bypassing two-factor authentication for login and password-reset flows.