Mobile Application Security 1 Account Takeover via Password Reset Token Disclosure in Response Aug 3, 2024