ZerkerEOD's Blog
GhostA security researcher documents a vulnerability in Udemy's MFA enrollment flow that allowed changing an account's email address without re-authentication, enabling account takeover. The newsletter publishes vulnerability disclosures with step-by-step technical narratives of how each issue was found.