AI pentesting agent finds critical OTP bypass on insurer site
Read original source →thehackernews.com
Reflectiz's AI pentesting agent autonomously found a critical authentication bypass on a major insurer's production website with millions of users. The login request's channel and address fields let the OTP be sent to an attacker-controlled inbox, since the server never verified the address belonged to the account.
1 source
More stories today
IDC-Lenovo study: 88% of AI pilots never reach production
A joint IDC and Lenovo study finds 88% of AI proof-of-concept projects fail to reach production, citing unclear objectives, unprepared data, and thin in-house agentic AI expertise. The gap splits build and run teams.
The New Stack·1 hour ago
New Material joins Mistral to bring design to mission-critical AI
Mistral AI·1 hour agoTechCrunch Disrupt 2026 Day 2 features Nvidia, Waabi, Flock Safety AI talks
Day 2 at San Francisco's Moscone West spans AI, robotics, AI hardware, public safety and venture, with speakers from Nvidia, Waabi, Flock Safety and Ricursive Intelligence plus Benchmark's full partnership. The event runs October 13-15 with 10,000+ attendees, 250+ speakers across 200+ sessions and 300+ startups in the Expo Hall.
TechCrunch·1 hour ago
Zvi Mowshowitz argues frontier lab safety culture is broken
Newsletter cites David Robinson resigning to blow the whistle at OpenAI and OpenAI firing three safety researchers, plus misalignment reports from both OpenAI and Anthropic. Mowshowitz says Anthropic's safety culture is stronger but still insufficient, and points to Google and Meta releases Argon and Wonder.
Don't Worry About The Vase·1 hour ago
Schneier pushes back on AI cryptanalysis pessimism
Bruce Schneier responds to Matthew Green's pessimistic series on AI systems vastly outperforming humans at cryptanalysis of symmetric and public-key ciphers, saying he is more optimistic and has stronger faith in cryptographers' over-engineering. He says he is writing up a more detailed argument.
Schneier on Security·1 hour ago
Stripe's Eileen O'Mara on agentic commerce at Dublin AI Summit
Stripe Vice Chair Eileen O'Mara said agentic commerce could reshape payments, speaking at the International AI Summit in Dublin. She also addressed Europe's push to help startups scale and the surge of AI-powered businesses.
Bloomberg Technology·1 hour ago
Reddit user tests crude sketch-to-photo generation with Krea 2
A r/StableDiffusion user built a simple tool that turns a rough sketch into a prompt and then an image using Krea 2, posting the sketch, prompt, and resulting photorealistic landscape. The prompt described a wide-angle photorealistic landscape photograph.
r/StableDiffusion·1 hour ago
Harmonic Security raises $50M Series B for workforce AI protection
The round brings total funding to $76M and was led by Crosspoint Capital Partners with existing investors. Harmonic's platform uses custom small language models to classify employee AI tasks across browser, desktop, and agentic workflows.
SecurityWeek·1 hour ago
