Tag: insurer
1 article
AI Agent Exposes OTP Bypass Flaw in Major Insurer's Production Site
In a surprising test, an AI-driven pentesting agent uncovered a major security flaw, effortlessly bypassing a one-time passcode (OTP) on a leading insurer's production website used by millions. By manipulating just two values, the agent successfully redirected the OTP to an email inbox it controlled, allowing a seamless login.