authentication
2 posts
Article
AI agent rerouted an insurer's login code to itself
An AI pentesting agent autonomously found a critical OTP bypass on a major insurer's live site, where the login request chose where the code went.
Article
Passkeys don't stop account takeover
Passkeys stop login-flow phishing but leave SMS and email recovery intact, so account takeover and lockout stay the real risks for most users.