Maria presenting her talk on “APACHE STRUTS, SERVERLESS, AND, STORED XSS ZERO-DAY” at Oredev conference. The aim of this talk is to introduce the audience to latest critical vulnerabilities. The first half of the talk covered the two most critical vulnerabilities in platforms previously unfathomable, i.e. vulnerabilities in Apache Struts and Serverless Architectures with examples/demos of exploits and its effects. Moreover, it also covered Stored XSS Zero-day, a vulnerability that allowed hackers to compromise 70,000 websites in March 2019. The DOM with real life scenarios, code demos, the effects of exploitation, and recommended prevention/remediation processes were well presented.