On July 4th, 2022, Chief Digital and Artificial Intelligence Office (CDAO), Directorate for Digital Services (DDS), DoD Cyber Crime Center (DC3), and HackerOne publicly launched the “Hack U.S.” bug bounty challenge, allowing ethical hackers from around the globe to earn monetary rewards for reporting of critical and high vulnerabilities from within the DoD Vulnerability Disclosure Program (VDP) published scope. Through the piloting of Hack U.S., DoD gained critical insights into how the hacker community competes for prizes with an end goal of strengthening the security of the hundreds of thousands of assets in the DoD scope.
Related Articles
All Mix →Five years of the GitHub Bug Bounty program
This blog was written by GitHub’s Engineering Team and originally published here. GitHub launched our Security Bug Bounty program in 2014, allowing us to reward independent…
The Simple Economic Reason I Prefer Apple to Google
The iOS/Apple vs. Android/Google debate has been explored for years by thousands of people. We know the arguments and they’re rather boring at this point.…
How we got read access on Google’s production servers
Few things are better than a good ethical hacking challenge and what could be more fun than finding a target that can be used against…
How to Get Samantha from Her or TARS from Interstellar on Your iPhone/Android
Table of Contents Install iPhone Android Invoke it using an Apple shortcut Make it sound like Scarlett Johansson or TARS Personalizing your new AI Shortcuts…
[tl;dr sec] #280 – Hardening GitHub Actions, Uber’s Multi-Cloud Secret Management, Prompts are the New IOCs
Table of Contents Detailed guide on all the ways to harden GitHub Actions, Uber's Secret Management Platform that manages >150,000 secrets, "LLM TTPs" + a…
InsertScript: Blink – DoS of tab via SVG in img tag / CSS context
This is just a quick blogpost to document a behavior in the Blink engine in regards to the processing of SVG images in the context…

