bug-bounty 2 Deanonymizing Users at Scale: When Blocking Becomes an Oracle Nov 18, 2025 Cache Deception + CSPT: Turning Non Impactful Findings into Account Takeover Aug 18, 2025