2026年10月14日 7:00 ET 发布 · 更新于 1 个月前 · 1 个来源
An AI Agent Found a Critical OTP Bypass in Production. The Attack Was the Easy Part.
The Hacker News
·
原始报道
The bug was simple: the login let you choose where your sign-in code went. Proving it on a live website was the hard part. TL;DR During an authorized assessment, an AI pentesting agent found a critical authentication bypass on a major insurer's production website, on its own. One login request let the user choose where the one-time passcode went. The attack was the easy part. Proving it
原文