--- title: "Clicking the link in the email is not required; no authentication is required, no user interaction… — turansecurity — DecisionGateway" description: "allegation by turansecurity, recorded recently — verbatim quote and source citation." canonical_url: "https://dgw.tmarket.io/claims/01a1d0db-47a4-7e21-8d4f-0f8642a6061a" meta: "og:description": "allegation by turansecurity, recorded recently — verbatim quote and source citation." "og:image": "https://dgw.tmarket.io/og.jpg" "og:image:alt": "White network of connected nodes crossed by a timeline on black" "og:image:height": "1024" "og:image:width": "1024" "og:title": "Clicking the link in the email is not required; no authentication is required, no user interaction… — turansecurity — DecisionGateway" "twitter:image": "https://dgw.tmarket.io/og.jpg" --- > Index of every page on this site: [llms.txt](https://dgw.tmarket.io/llms.txt) allegation # **Clicking the link in the email is not required; no authentication is required, no user interaction is needed, and MFA does not help.** A allegation by [**turansecurity**](https://dgw.tmarket.io/actors/01a1d549-f288-798d-b00c-dfa7e90595b0). Statements are as reported by the cited publishers — not verified by DecisionGateway. > *Pochtadagi havolani bosish shart emas. Autentifikatsiya talab qilinmaydi, foydalanuvchi ishtiroki kerak emas, MFA yordam bermaydi.* turansecurityPublished 2026-08-25 [ Read source](https://t.me/turansecurity/662) [**turansecurity dossier **](https://dgw.tmarket.io/actors/01a1d549-f288-798d-b00c-dfa7e90595b0) ## **Discussion** ## **Related claims** [**Strong passwords and MFA/TFA mechanisms should be enabled, especially for administrator and root accounts.**Turan Security Xavfsizlik Byulleteni · commitment](https://dgw.tmarket.io/claims/01a1d0db-ca2a-7012-a2bc-edd3b8256e16) [**In three of these campaigns, the common point was abuse of Microsoft's Device Code Authentication, a method by which an attacker, by deceiving the user, can gain access to their Microsoft 365 account without stealing a password and even while directly bypassing MFA.**intsec · allegation](https://dgw.tmarket.io/claims/01a1d29f-8ecc-7ce9-b66d-adfe6f873101) [**The QuickPay feature is suspected to require the user to have completed identity verification before it can be used.**encmasuta · allegation](https://dgw.tmarket.io/claims/01a1d5f6-3b9a-7778-b7d1-060683626c5c) [**Even without enabling a feature that explicitly requires identity verification, TenPayGo may still require users to complete identity verification when binding a card or making a payment, depending on risk control circumstances.**encmasuta · prediction](https://dgw.tmarket.io/claims/01a1d5f6-3bb0-75b5-8a87-6495e65c5546) [**No payment card or banking info was compromised.**The company · denial](https://dgw.tmarket.io/claims/01a1cd15-d1bf-7b8f-b184-620b0bd5684f) [**TenPayGo's identity verification does not support real-name verification using China Hong Kong or China Macao passports.**encmasuta · allegation](https://dgw.tmarket.io/claims/01a1d5e6-84c6-743d-b58b-6ffd7f1c8706) ## **More claims by turansecurity** [**Red Hat Build of Keycloak users should apply RHSA-2026:56519 / 56520 / 56523 / 56524.**commitment](https://dgw.tmarket.io/claims/01a1d0db-490c-7c0a-bc82-fad597f8e3cc) [**Upgrade to 26.7.2 / 26.6.6 / 26.4.15 (LTS); the fix is also available in 26.8.0.**commitment](https://dgw.tmarket.io/claims/01a1d0db-489a-793a-af3f-b9842e0c16c7) [**Unsupported branches (26.5, 26.3 and older) will not be fixed and remain permanently vulnerable until upgraded.**prediction](https://dgw.tmarket.io/claims/01a1d0db-483e-7e73-b2af-48f121518eb9) [**All versions prior to 26.7.2, 26.6.6 and 26.4.15 (LTS) are affected.**statement](https://dgw.tmarket.io/claims/01a1d0db-4814-7ea0-8e95-1bd2022de6f8) [**Exploit code has not yet been distributed, but the CVE is confirmed.**statement](https://dgw.tmarket.io/claims/01a1d0db-47ea-7a12-aa78-32b4df3346ef) [All claims by turansecurity](https://dgw.tmarket.io/claims?claimant_id=01a1d549-f288-798d-b00c-dfa7e90595b0) [All claims](https://dgw.tmarket.io/claims) ```json {"@context":"https://schema.org","@graph":[{"@id":"https://dgw.tmarket.io/#website","@type":"WebSite","description":"Decisions, events and falsifiable forecasts from 4,000+ Telegram channels — every claim cited. Read free.","name":"DecisionGateway","url":"https://dgw.tmarket.io/","publisher":{"@id":"https://dgw.tmarket.io/#identity"}},{"@id":"https://dgw.tmarket.io/claims/01a1d0db-47a4-7e21-8d4f-0f8642a6061a#webpage","@type":"WebPage","description":"allegation by turansecurity, recorded recently — verbatim quote and source citation.","name":"Clicking the link in the email is not required; no authentication is required, no user interaction… — turansecurity — DecisionGateway","url":"https://dgw.tmarket.io/claims/01a1d0db-47a4-7e21-8d4f-0f8642a6061a","breadcrumb":{"@id":"https://dgw.tmarket.io/claims/01a1d0db-47a4-7e21-8d4f-0f8642a6061a#breadcrumb"},"isPartOf":{"@id":"https://dgw.tmarket.io/#website"},"potentialAction":[{"@type":"ReadAction","target":["https://dgw.tmarket.io/claims/01a1d0db-47a4-7e21-8d4f-0f8642a6061a"]}]},{"@id":"https://dgw.tmarket.io/#identity","@type":"Organization","name":"DecisionGateway","url":"https://dgw.tmarket.io"},{"@id":"https://dgw.tmarket.io/claims/01a1d0db-47a4-7e21-8d4f-0f8642a6061a#breadcrumb","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","name":"Home","item":"https://dgw.tmarket.io","position":1},{"@type":"ListItem","name":"Claims","item":"https://dgw.tmarket.io/claims","position":2},{"@type":"ListItem","name":"Clicking the link in the email is not required; no…","position":3}]},{"@id":"https://dgw.tmarket.io/claims/01a1d0db-47a4-7e21-8d4f-0f8642a6061a#/schema/quotation/1","@type":"Quotation","dateCreated":"2026-08-25","isBasedOn":"https://t.me/turansecurity/662","text":"Pochtadagi havolani bosish shart emas. Autentifikatsiya talab qilinmaydi, foydalanuvchi ishtiroki kerak emas, MFA yordam bermaydi.","url":"/claims/01a1d0db-47a4-7e21-8d4f-0f8642a6061a","spokenByCharacter":{"@type":"Person","name":"turansecurity","@id":"/actors/01a1d549-f288-798d-b00c-dfa7e90595b0"}}]} ``` ## Sitemap See the full [sitemap](https://dgw.tmarket.io/sitemap.md) for all pages.