An AI pentest agent redirected a login OTP to its own inbox - the server trusted the client's address. https://intel.threadlinqs.com/threat/TL-2026-3502 #ThreatIntel #Reflectiz #OTP #OTPBypass
@threadlinqs.bsky.social
@threadlinqs.bsky.social
@threadlinqs.bsky.socialAn AI pentest agent redirected a login OTP to its own inbox - the server trusted the client's address. https://intel.threadlinqs.com/threat/TL-2026-3502 #ThreatIntel #Reflectiz #OTP #OTPBypass