Project Zero: Gregor Samsa: Exploiting Java's XML Signature Verification

https://googleprojectzero.blogspot.com/2022/11/gregor-samsa-exploiting-java-xml.html

https://twitter.com/home/status/1587772448371625984

https://twitter.com/home/status/1587772592940666880

https://twitter.com/home/status/1587773719006613505

https://twitter.com/home/status/1587774406297796609

https://twitter.com/home/status/1587776173559275520

https://twitter.com/home/status/1587776527529553920

https://twitter.com/home/status/1587780653239738370

https://twitter.com/home/status/1587783182140772352

https://twitter.com/home/status/1587786491199094787

https://twitter.com/home/status/1587787143988101121

https://twitter.com/home/status/1587790467940376578

https://twitter.com/home/status/1587790583560445952

https://twitter.com/home/status/1587803428331438083

https://twitter.com/home/status/1587824715346808832

https://twitter.com/home/status/1587932913592664066