US Privacy Snags a Win as Judge Limits Warrantless FBI Searches
This week started off with a bang and just kept going. In the wee hours of Saturday night, TikTok cut off access to users in…
Month: January 2025
New Guidance for Federal AI Procurement Embraces Red Teaming and Other HackerOne Suggestions
Earlier this year, the Office of Management and Budget (OMB), which establishes budget rules for federal agencies, issued a memorandum on Advancing the Responsible Acquisition of…
Six Years of Proactive Defense: Deribit’s Journey with HackerOne
Q: Why did Deribit launch a bug bounty program? A: I like to view security as an onion where each additional layer provides additional protection…
Data Privacy and Security: Protecting Patient Data and Ensuring HIPAA Compliance
Data security is challenging enough when the goal is to prevent bad actors from gaining unauthorized access. But sometimes, other requirements make it even more…
Streamlining Payment Processing for High-Risk Businesses in 2025
Payment processors need to constantly be on the edge of innovative technologies and tools, especially when high-risk businesses are concerned. With cyber-attacks and fraud being…
Introducing the Wells Fargo Public Bug Bounty Program
Since then, we’ve grown the program, collaborated with HackerOne, and built partnerships within the bug bounty community. The valuable insights we’ve gained from security researchers…
How Effective Data Center Security Starts at the Perimeter with Advanced Physical Security Solutions
Data is one of the most valuable resources in the world. Despite its ubiquity in the digital age, companies are constantly clamoring for more, leveraging…
How Crypto and Blockchain Organizations Manage Complex Attack Surfaces With Competitive Security Testing Programs
There are three factors that differentiate crypto and blockchain organizations from other industries; their attack surfaces, their most common vulnerabilities, and the amount they spend…
How a Privilege Escalation Led to Unrestricted Admin Account Creation in Shopify
In a privilege escalation attack, an attacker gains elevated rights, permissions, or entitlements beyond the intended level associated with their identity, account, or device. Systems…
New York Releases AI Cybersecurity Guidance: What You Need to Know
AI adoption is accelerating in the financial services industry, both as an asset for improving business operations and as a potential tool to defend against…
The OWASP Top 10 for LLMs 2025: How GenAI Risks Are Evolving
Here is HackerOne’s perspective on the Top 10 list for LLM vulnerabilities, how the list has changed, and what solutions can help secure against these…
ROI Isn’t Cutting It: 6 Questions to Help CISOs Better Quantify Security Investments
However, in cybersecurity, quantifying net profit becomes significantly more complex due to the intangible nature of its benefits and the absence of direct revenue generation.…