Misconfigurations & Fixes We Found a Misconfiguration That Allowed Us to Bypass 2FA on a Major Service—Here’s How October 15, 2025