Trendmast

Technology news, aggregated

ad slot · header banner 728×90
Cyber Security

An AI Agent Found a Critical OTP Bypass in Production. The Attack Was the Easy Part.

Image: The Hacker News

ad slot · in-content video 16:9

Coverage

More coverage

  • The Hacker News · October 14, 2026 11:00
    The bug was simple: the login let you choose where your sign-in code went. Proving it on a live website was the hard part. TL;DR During an authorized assessment, an AI pentesting agent found a critical authentication bypass on a major insurer's production website, on its own. One login request let…