NewsPublished 4 Aug 2025

Proton fixes Authenticator bug leaking TOTP secrets in logs

Source Reddit InfoSec News

Description

Proton fixes Authenticator bug leaking TOTP secrets in logs Source: https://www.bleepingcomputer.com/news/security/proton-fixes-authenticator-bug-leaking-totp-secrets-in-logs/

Impact

For European organizations, the impact of this vulnerability could be significant, especially for those relying on Proton Authenticator for securing access to critical systems and services. Exposure of TOTP secrets undermines the integrity of two-factor authentication, potentially allowing attackers to bypass this additional security layer and access sensitive corporate resources, including email, cloud services, and internal applications. This could lead to data breaches, unauthorized transactions, and lateral movement within networks. Given the increasing regulatory emphasis on strong authentication mechanisms under frameworks such as GDPR and NIS Directive, failure to address this vulnerability could also result in compliance violations and reputational damage. Organizations in sectors with high security requirements, such as finance, healthcare, and government, are particularly at risk if attackers exploit leaked TOTP secrets to compromise privileged accounts.

Defensive guidance

European organizations should immediately verify that their Proton Authenticator installations are updated to the latest patched version that addresses the logging vulnerability. Beyond patching, organizations should audit their logging configurations to ensure that sensitive authentication data is never recorded or stored in logs. Implement strict access controls and encryption for log files to prevent unauthorized access. It is advisable to rotate TOTP secrets for all users who may have been affected by the leak to invalidate any potentially compromised tokens. Additionally, organizations should enhance monitoring for suspicious authentication attempts that may indicate misuse of leaked TOTP secrets. Incorporating hardware-based 2FA tokens or biometric factors can further reduce reliance on software-generated TOTP secrets. Finally, conducting security awareness training to inform users about the risks and encouraging prompt reporting of suspicious activity will strengthen overall resilience.

References

Community reviews

Loading reviews…

Description

AI analysisMachine-generated, updated 4 Aug 2025, 20:02 UTC

Technical details

References

Community reviews

Related threats