and why they're getting harder to find
Stealing user logins by hijacking a vulnerable webview implementation in a mobile app
A short writeup of finding a stored XSS vulnerability in an AI powered writing app