Off-topic for aiqbench
This story was gathered from a source we follow but falls outside AI and quantum coverage, so there is no aiqbench take for it.
Tata’s B2B Platform Flaw Enables Account Takeover Just by Knowing Victim’s Phone Number
A critical authentication flaw in Tata Nexarc, a B2B procurement platform for small and medium businesses in India, allowed attackers to take over accounts by knowing only a registered mobile number. The platform reportedly exposed the one-time password used for login within a decryptable API response, removing the need to intercept SMS messages, phish users, […] The post Tata’s B2B Platform Flaw Enables Account Takeover Just by Knowing Victim’s Phone Number appeared first on Cyber Security News.
A critical authentication flaw in Tata Nexarc, a B2B procurement platform for small and medium businesses in India, allowed attackers to take over accounts by knowing only a registered mobile number. The platform reportedly exposed the one-time password used for login within a decryptable API response, removing the need to intercept SMS messages,…
Excerpt shown under the publisher's RSS terms · 53 words · full text and figures are on the publisher's site
Related coverage
Sen. Adam Schiff on AI regulation, free speech, and impeaching Trump one more time
The Verge · Oct 5, 2026
All the latest news on Meta’s cute, creepy Muse AI agent
The Verge · Sep 30, 2026
Links #3: 2026/06 Part 1
LessWrong · Jun 15, 2026
Research Note: Filtering Subversion-Relevant Information From Pretraining Data Is Feasible
LessWrong · Oct 5, 2026