Two-factor authentication isn't as secure as you might expect - CNET

Passcodes from SMS or authenticator apps are better than passwords alone, but hackers can exploit their weaknesses.