account-takeover 2 A University Web Audit Oct 6, 2025 Cache Deception + CSPT: Turning Non Impactful Findings into Account Takeover Aug 18, 2025