xsleaks

• Existence oracle for Secure cookies on insecure Web origins Sep 12

• Abusing Slack's file-sharing functionality to de-anonymise fellow workspace members Oct 12