Back

ZerkerEOD's Blog

Ghost
zerkersec.io· irregular· Inactive for over a year

A security researcher documents a vulnerability in Udemy's MFA enrollment flow that allowed changing an account's email address without re-authentication, enabling account takeover. The newsletter publishes vulnerability disclosures with step-by-step technical narratives of how each issue was found.

account takeovermfa bypassudemy vulnerabilitycredential stuffingsecurity misconfigurationresponsible disclosurebug bountyweb security
Platform
Ghost
Frequency
Irregular
Latest issue
Oct 20, 2024
Language
English
Written for
Security researchers, developers and security-minded readers
Tone
analytical
Tracked since
Oct 25, 2026

Website: https://zerkersec.io/