web-security 2 Pre-Account Takeover via OAuth: The Bug That Waits For You Jul 29, 2026 Notes on Web LLM Attacks and Defenses Jan 22, 2026