A vulnerability allowing attackers to bypass PayPal’s two-factor authentication mechanism has been unveiled by Duo Labs, the research team at US security startup, Duo Security.