• Github Actions and the threat of malicious pull requests

• Shaking secrets out of CircleCI builds - insecure configuration and the threat of malicious pull requests

• Cache poisoning DoS in CloudFoundry gorouter (CVE-2020-5401)

• Exploiting email address parsing with AWS SES

• Abusing HTTP hop-by-hop request headers

• HAProxy HTTP request smuggling (CVE-2019-18277)

• CORS'ing a Denial of Service via cache poisoning