https://blog.crombie.dev/en/threats-vulnerabilities/