Web-Security

Misconfigured email auto-configuration globally, manipulating GitHub contribution histories to infiltrate supply chains, and adversarial Android malware factories.

A detailed breakdown of the WebSocket protocol, highlighting its threat model, common vulnerabilities like CSWSH, and attack techniques specific to full-duplex communication.

New approaches for finding business logic flaws via annotation-based sanitisation and detecting site isolation bypasses in modern browsers.