Security experts at Duo Security have discovered a serious flaw in the implementation of two-factor authentication which allow attackers to bypass it.