2026-07-21 How We Accidentally Hacked the #1 University in Canada How a MarkUs bug chain went from CSRF and zip slip to RCE.