I was suddenly logged out of all my devices last night. Initially I was not sure that I wasn’t being targeted with the MFA bomb attack that is going around against Apple users, but after some reading it seemed this was something different.
Nobody knew much at the time; internet complaints were non-existent. But by the time I woke up this morning, I can see that it is quite widespread and so far, Apple hasn’t said anything about it.
The process seemed to be that I was logged out, and when I entered my password to log back in, I was forced into a password reset flow. I was only able to do that successfully on my iPhone at first, then my iPhone was used for MFA as I re-logged in to my other devices. Is that because the iPhone was uniquely qualified to be the first device, or just some vagary of the system?
It is pretty disconcerting that this happened with no explanation. I assume that the situation is still unfolding, making it hard to carve out the cycles for notifications to users. Hopefully, Apple will provide some context in the near future so users can assess if they may be vulnerable elsewhere as well.