Veille CyberInfra — Veille cybersecurite : Japanese furniture giant Nitori says hackers stole 37.6M customer records Veille CyberInfra — Veille cybersecurite : N-able releases security hotfixes for zero-day vulnerabilities Veille CyberInfra — Veille cybersecurite : Microsoft Researchers Show AI Agents Can Be Backdoored by Editing Fewer Than 10 Neurons Veille CyberInfra — Veille cybersecurite : Hackers Target Qlik Sense Servers With Reverse Shells, Stage ActiveMQ and Veeam Exploits Veille CyberInfra — Veille cybersecurite : Cisco BroadWorks and Openwave Flaws Actively Exploited Despite Available Patches Veille CyberInfra — Veille cybersecurite : Microsoft Patches 1,259 Flaws, Including Exploited Outlook Bug That May Expose NTLMv2 Hashes Veille CyberInfra — Veille cybersecurite : Japanese furniture giant Nitori says hackers stole 37.6M customer records Veille CyberInfra — Veille cybersecurite : N-able releases security hotfixes for zero-day vulnerabilities Veille CyberInfra — Veille cybersecurite : Microsoft Researchers Show AI Agents Can Be Backdoored by Editing Fewer Than 10 Neurons Veille CyberInfra — Veille cybersecurite : Hackers Target Qlik Sense Servers With Reverse Shells, Stage ActiveMQ and Veeam Exploits Veille CyberInfra — Veille cybersecurite : Cisco BroadWorks and Openwave Flaws Actively Exploited Despite Available Patches Veille CyberInfra — Veille cybersecurite : Microsoft Patches 1,259 Flaws, Including Exploited Outlook Bug That May Expose NTLMv2 Hashes

Veille cybersecurite : An AI Agent Found a Critical OTP Bypass in Production. The Attack Was the Easy Part.

14/10/2026

Source : The Hacker News

The bug was simple: the login let you choose where your sign-in code went. Proving it on a live website was the hard part.

TL;DR

During an authorized assessment, an AI pentesting agent found a critical authentication bypass on a major insurer’s production website, on its own.
One login request let the user choose where the one-time passcode went.
The attack was the easy part. Proving it

Lire l’article original

Vous vous demandez si votre entreprise est exposee a ce type de faille ? Reservez un appel decouverte gratuit.

← Retour au blog