Skip to content
October 16, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
  • Weekly Recap
Light/Dark Button
  • Home
  • News
  • Technology
  • Only 10% Google users use two-factor authentication
  • Technology

Only 10% Google users use two-factor authentication

Do Son January 19, 2018 2 minutes read
two-factor authentication
Add Daily CyberSecurity as a preferred source on Google

Although two-step verification helps to improve account security, it does not seem to be popular among Google users. A Google security engineer said on Tuesday that less than 10% of all active Google accounts used this extra protection.

“In fact, such a clear security mechanism has not been widely adopted,” said Google engineer Grzegorz Milka at the USENIX Enigma 2018 conference.

Although this percentage is indeed very low, it is not entirely unexpected. Although two-step verification can prevent hacking accounts, but also sacrifice some convenience. The general mode of this mechanism is as follows: When you want to access the account, not only to enter the password but also enter the phone received the verification code. However, charging and entering the verification code will increase the login time, so many users will close this.

“People think this is an unnecessary step,” Mika said. There are also users worried about sharing their mobile number with online services.

But sometimes, simply using a password to protect your account is not enough. Hackers use other software leaked data, or use phishing tools to obtain user passwords. Google research found that 67 million valid Google account login information can be found from third-party data.

“The password theft ecosystem is very prosperous,” Mika said. “There are tens of thousands of account changes every day.”

Fortunately, Google also added additional security measures to the account. For example, if the company’s internal system detects any abnormal logins, it verifies that the action is from the user.

Reference: theregister

Related coverage

  • IBM created the world’s smallest computer
  • Google Ask Photos Relaunches: AI-Powered Search Now Faster, Smarter & Back for US Users
  • CDN Solution Traffic Control Upgraded to Apache Top-Level Project
  • South Korea’s largest cryptocurrency exchange, Upbit was investigated by Korea’s Financial Watchdog
  • Regulatory Alignment: Let’s Encrypt Amends Subscriber Agreement to Enforce US Sanctions and Export Compliance
  • The “Threads” Trap: How X is Weaponizing Narrative Suspense to Dethrone Meta
Track all actively exploited CVEs →

Support Our Threat Intelligence

Find our tech and OS security coverage helpful? Support our work today and unlock a 100% ad-free reading experience!

Buy Me a Coffee Logo Buy Me a Coffee
Select your plan
Free Pro Team

Hover over a plan to see its benefits.

Get Zero-Hour Vulnerability Alerts

Critical CVEs, CVSS scores, and PoC updates — straight to your inbox every week.

We respect your inbox. Unsubscribe anytime.

SHARE
Share on FacebookShare on XShare on LinkedInShare on TelegramShare on BlueskyShare on Mastodon
Written by
@DdoS · Security Researcher

Do Son

Do Son is the Founder and Editor of SecurityOnline.info. Working in cybersecurity since 2013, he reports on vulnerabilities, malware, and emerging threats, providing timely analysis to help organizations and individuals stay ahead of evolving risks.

Tags: google two-factor authentication

Search

Translation

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2020-13125CVSS 7.2
    An issue was discovered in the "Ultimate Addons for Elementor" plugin before 1.24.2 for WordPress, as exploited in...
    Watchtower Verified📅 Updated: Oct 16, 2026
  • CVE-2020-13126CVSS 9.9
    An issue was discovered in the Elementor Pro plugin before 2.9.4 for WordPress, as exploited in the wild...
    Watchtower Verified📅 Updated: Oct 16, 2026
  • CVE-2019-20180CVSS 8.0
    The TablePress plugin for WordPress is vulnerable to CSV Injection in versions up to and including 1.14 via...
    Watchtower Verified📅 Updated: Oct 16, 2026
  • CVE-2026-111357CVSS 7.0
    Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, leading to...
    Watchtower Verified📅 Updated: Oct 16, 2026
  • CVE-2026-106931CVSS 8.5
    SiteGuard Server Edition contains an OS command injection vulnerability, which may allow an attacker to execute arbitrary OS...
    Admin intel📅 Updated: Oct 15, 2026
  • CVE-2025-61624CVSS 6.0
    An Improper Limitation of a Pathname to a Restricted Directory (\'Path Traversal\') [CWE-22] vulnerability in Fortinet FortiOS 7.6.0...
    Admin intel📅 Updated: Oct 15, 2026
  • CVE-2026-110447CVSS 9.2
    Collabora Online Built-in CODE Server before 26.4.303 (richdocumentscode), a Nextcloud app, allows remote code execution, as exploited in...
    Watchtower Verified📅 Updated: Oct 15, 2026
  • CVE-2026-21589CVSS 9.3
    This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software...
    CISA KEV📅 Added to KEV: Oct 15, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-101954CVSS 9.3
    An Improper Authentication vulnerability in the J-Web management interface and its NETCONF session handling of Juniper Networks Junos...
    📅 Updated: Oct 16, 2026
  • CVE-2026-101982CVSS 9.3
    A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos...
    📅 Updated: Oct 16, 2026
  • CVE-2026-102175CVSS 9.3
    A Heap-based Buffer Overflow vulnerability in the sdxd service-deployment daemon of Juniper Networks Junos OS and Junos OS...
    📅 Updated: Oct 16, 2026
  • CVE-2026-102031CVSS 9.3
    An OS Command Injection vulnerability in TACACS of Juniper Networks Junos OS Evolved allows a low-privileged TACACS+-authenticated user...
    📅 Updated: Oct 16, 2026
  • CVE-2026-101990CVSS 9.3
    A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos...
    📅 Updated: Oct 16, 2026
  • CVE-2026-101955CVSS 9.2
    A Stack-based Buffer Overflow vulnerability in the UTM Anti-Spam SBL of Juniper Networks Junos OS on SRX series...
    📅 Updated: Oct 16, 2026
  • CVE-2026-101997CVSS 9.2
    An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ipfd of Juniper...
    📅 Updated: Oct 16, 2026
  • CVE-2026-111444CVSS 9.8
    Wheels through 4.1.2 allows SQL injection on MySQL/MariaDB with backslash escaping enabled (NO_BACKSLASH_ESCAPES absent) when an application supplies...
    📅 Updated: Oct 16, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.