Syrian Electronic Army (SEA) claimed responsibility for several attacks against news and media companies. The attacks all exploited tried-and-true spear-phishing tactics where internal email accounts were compromised and used to collect credentials and gain access to Twitter feeds, RSS feeds and other sensitive information. In July 2013, the SEA went after Truecaller.com and compromised a user database, and noted that Phishing was the root cause. Jack Daniel, a security expert, suggested that CNN’s Hootsuite account probably neglected to have two factor authentication enabled.”]
Source: https://www.csoonline.com/article/2136227/curious-point-about-cnn-s-twitter-account-compromise.html