Outcomes are often determined by financial incentives.
How to determine if you are vulnerable.
Paraxial.io: Automated Security for Developers