Cross-Site WebSocket Hijacking Exploitation in 2025 (includesecurity.com)
Some of my favorite findings discovered during our client assessments at Include Security have exploited Cross-Site Websocket Hijacking (CSWSH) vulnerabilities.