Category Archives: HackerOne

DOD expands vulnerability disclosure program, giving hackers more approved targets

Posted on by

The Pentagon is letting outside hackers go after more Department of Defense targets than ever before, in an effort to find DOD’s vulnerabilities before foreign hackers do, DOD announced Wednesday. The program, “Hack the Pentagon,” is expanding the number of DOD targets that ethical hackers can go after to try to ferret out vulnerabilities, according to the announcement. The program, which launched in 2016, previously allowed cybersecurity professionals to test DOD systems when it involved public-facing websites and applications. Now interested hackers may go after all publicly-accessible DOD information systems, including publicly-accessible networks, Internet of Things devices and industrial control systems, according to DOD. “This expansion is a testament to transforming the government’s approach to security and leapfrogging the current state of technology within DOD,” said Brett Goldstein, the director of the Defense Digital Service (DDS). The DOD Cyber Crime Center, which oversees the program, said the expansion was always […]

The post DOD expands vulnerability disclosure program, giving hackers more approved targets appeared first on CyberScoop.

Continue reading DOD expands vulnerability disclosure program, giving hackers more approved targets→

HackerOne Brings Hackers Into Cybersecurity Workflows

Posted on by

HackerOne announced today that the portfolio of tools it makes available to white hat hackers is extended now includes a video capture capability that makes it easier to demonstrate how a vulnerability might be exploited. At the same time, the HackerO… Continue reading HackerOne Brings Hackers Into Cybersecurity Workflows→

2021 Hacker Report: Hackers are not just driven by money

Posted on by

HackerOne released its 2021 Hacker Report that reveals a 63% increase in the number of hackers submitting vulnerabilities in 2020. As organizations’ attack surfaces have shifted due to pandemic led digital transformation, hackers have adapted and zeroe… Continue reading 2021 Hacker Report: Hackers are not just driven by money→

Hack the US Army for good with ‘Hack The Army’ bug bounty program

Posted on by

By Sudais Asif
For now, only those with invitation can join the new bug bounty program. Here’s what we know so far and what to expect.
This is a post from HackRead.com Read the original post: Hack the US Army for good with ‘Hack The Army’ b… Continue reading Hack the US Army for good with ‘Hack The Army’ bug bounty program→

HackerOne, Verizon weigh pros and cons of making live hacking contests virtual

Posted on by

Among all the ways COVID-19 has affected the cybersecurity world, perhaps nothing is more impossible than live hacking events, which were once a staple of the industry. The coronavirus forced bug bounty company HackerOne and Verizon Media into hosting two online hacking events together since the outbreak, and they recently completed what they billed as the world’s largest live hacking contest. Live hacking events, whether virtual or in-person, give companies a chance to lure ethical hackers to find their security flaws before the attackers do, and can serve as recruiting opportunities for corporate positions, too. What made the most recent competition stand out was its massive size, and what the experiment could mean for the rest of the bug bounty community. The HackerOne/Verizon Media duo wasn’t the first to move live hacking events online. Pwn2Own made a similar transition in March. With more than 3,000 people from 59 countries registering […]

The post HackerOne, Verizon weigh pros and cons of making live hacking contests virtual appeared first on CyberScoop.

Continue reading HackerOne, Verizon weigh pros and cons of making live hacking contests virtual→

Dating Site Bumble Leaves Swipes Unsecured for 100M Users

Posted on by

Bumble fumble: An API bug exposed personal information of users like political leanings, astrological signs, education, and even height and weight, and their distance away in miles. Continue reading Dating Site Bumble Leaves Swipes Unsecured for 100M Users→

Bug-Bounty Awards Spike 26% in 2020

Posted on by

The most-rewarded flaw is XSS, which is among those that are relatively cheap for organizations to identify. Continue reading Bug-Bounty Awards Spike 26% in 2020→

Enso Security raises $6M for its application security management platform

Posted on by

Enso Security, a Tel Aviv-based startup that is building a new application security platform, today announced that it has raised a $6 million seed funding round led by YL Ventures, with participation from Jump Capital. Angel investors in this round include HackerOne co-founder and CTO Alex Rice; Sounil Yu, the former chief security scientist at […] Continue reading Enso Security raises $6M for its application security management platform→

HackerOne introduces integrations and partnerships to connect and defend customers

Posted on by

HackerOne introduced a set of strategic integrations and partnerships that make it easy to integrate HackerOne data with existing security and development workflows. Announced at the fourth annual Security conference, the integrations seek to ensure th… Continue reading HackerOne introduces integrations and partnerships to connect and defend customers→