The slides for a recent Black Hat talk on vulnerability in many nostr clients is up.
I haven't had a chance to read through it completely yet but seems like most, if not all, of what they lay out are known issues and things we've all been working to fix for a while now. 🤷♂️