Bitrix24 Adds Email One-Time Codes as New Two-Factor Authentication Option in Cloud Version
Bitrix24 has expanded its two-factor authentication capabilities in the cloud edition by adding support for one-time codes delivered via email. This new method joins existing options that include codes from authenticator applications, push notifications, and SMS messages.
The feature is designed to assist organizations where staff members, for various reasons, do not use separate 2FA apps or may have inconsistent access to mobile phones for receiving verification texts. By providing an alternative channel, Bitrix24 aims to increase adoption of stronger authentication without forcing every user onto a single verification method.
Two-factor authentication adds an extra verification layer beyond the standard username and password combination. Even if attackers obtain credentials through phishing emails, data breaches, or social engineering calls impersonating technical support, they still need the additional code to gain entry.
Nevertheless, the company cautions that relying on email for the second factor requires careful consideration. If an attacker has already compromised the user’s mailbox, this method offers little protection. For high-value accounts, Bitrix24 therefore recommends using authenticator applications or device-based confirmations instead.
The same email-code functionality is scheduled to appear in the on-premise, boxed version of Bitrix24 in the near future. Additionally, the vendor plans to make two-factor authentication mandatory for all organizations subscribed to the Professional and Enterprise cloud tariffs.
Related articles
Why Russian Educators Prepare Sixth Graders for Ninth-Grade All-Russian Olympiads in Robotics and Information Security
Maxim Ivankov, who has run robotics and programming schools for children for nine years in a small Russian town, explains the decision to train students starting from fifth grade for the All-Russian Olympiad for Schoolchildren in the ninth-grade category. The strategy addresses the fact that regional and final stages begin only at ninth grade, while earlier participation yields only certificates with no benefits such as BVI university admission or regional prizes. The approach gives students up to five attempts instead of one, allowing systematic skill building similar to consistent athletic training. Challenges include extremely low enrollment despite free classes and widespread use of neural networks to solve school-stage tasks remotely, which distorts results and lacks regulatory prohibitions. The 2025/26 season introduced four separate profiles under informatics, including information security and robotics, both of which grant the same BVI privileges as mathematics or physics. Detailed analysis of past tasks shows a steep difficulty jump from municipal to regional stages, with topics such as the RANSAC algorithm and ten-dimensional hypercube traversal appearing only at the final level.
Corporate Boomerang: WordPress Founder Matt Mullenweg Survives Board Coup at Automattic
Automattic experienced a rapid corporate power struggle when its board placed founder and CEO Matt Mullenweg on forced paid leave. Within two days Mullenweg regained control by leveraging his shareholder voting rights and removed opposing administrators from the company Slack. The original board members who supported his ouster are now departing the company. The brief conflict highlighted how corporate governance rules allowed shareholders to ultimately determine board composition. Mullenweg described his restored position as that of a pirate before announcing renewed alignment with the board. Public support from WordPress leadership helped solidify his return to leadership.
Russian Transport Ministry Ready to Provide Regulatory Framework for Poplar Fluff Vacuum Robots
The Russian Ministry of Transport has signaled readiness to develop necessary regulations if municipal services express interest in specialized robots designed to collect poplar fluff from city streets. The statement from Minister Andrey Nikitin follows a viral meme that originated from a two-year-old video created by the agency Out Digital. Although no real machines called пухосос exist and no serial production has been launched, the fictional concept gained widespread attention after being presented as an actual Moscow development. The Department of Housing and Utilities in Moscow playfully expanded the joke by introducing additional fictional devices named Zasosyor, Musorozhor, and Gazonyukh. Linguistic experts at Gramota.ru later analyzed the newly coined term, further amplifying the meme's reach across Russian media and social networks. The minister emphasized that any future regulatory support would depend entirely on demand from communal services rather than proactive development by the ministry itself.
Context is Everything: How to Avoid Drowning in Security Incidents and Distinguish Employees from Attackers
The article explains that false positives in security systems often stem from missing business context rather than technical flaws. It outlines three levels of filtering that combine process rules, access logs, and job-specific behavior to rank risk accurately. Behavioral analysis tools like UEBA can help but require proper training and human oversight to avoid generating more noise. Key metrics focus on reducing false alerts, improving MTTD and MTTR, and minimizing daily administration time. For smaller companies without dedicated SOC teams, the guidance emphasizes starting with log collection, identifying existential risks, and aligning policies with real business processes. The piece stresses that technology alone cannot replace analysts who deeply understand company operations.