As cited
Copy frozen at (site build).
vulnerabilities
An AI Agent Found a Critical OTP Bypass in Production. The Attack Was the Easy Part.
An artificial intelligence (AI) pentesting agent discovered a critical authentication bypass on a major insurer's production website during an authorized assessment. The vulnerability allowed users to redirect one-time passcodes to arbitrary destinations during login. The article indicates that detecting the flaw was straightforward, but validating and demonstrating the vulnerability presented additional challenges.
Why it matters: Insurers and other organizations relying on one-time passcode (OTP) authentication should audit their implementations for redirect or delivery bypass flaws, as this critical vulnerability could allow account takeover without valid credentials.
- Source published
- First seen by Cybersecurity Tracker