HackingInfoSec Fare Play: See the Movie for Free by Kerberoasting Service Tickets Through an AS-REPRoastable User
InfoSecVulnerabilities Did default SameSite:Lax put the nail in the coffin for CSRF? Mostly, but not always!