Max is a penetration tester with broad experience in finding and exploiting vulnerabilities.
One cross-site scripting flaw is enough to take over a user account in AWS Cognito. How the attack works, what it achieves and what prevents it.