Bandit Stealer Hits Windows Devices
A new info-stealing malware called Bandit Stealer is capable of evading detection and stealing personal and financial banking data stored in cryptocurrency wallets and web…
Author: Cybernoz
Hot Pixels attack checks CPU temp, power changes to steal data
A team of researchers at Georgia Tech, the University of Michigan, and Ruhr University Bochum have developed a novel attack called “Hot Pixels,” which can…
Zero Daily Newsletter: Fun, yet informative, AppSec, bug bounty, and hacker news
Read the news every day, and check the usual websites? Want to get your industry news and have a little humor dashed in? With Zero…
QBot malware abuses Windows WordPad EXE to infect devices
The QBot malware operation has started to abuse a DLL hijacking flaw in the Windows 10 WordPad program to infect computers, using the legitimate program…
CISA warns govt agencies of recently patched Barracuda zero-day
CISA warned of a recently patched zero-day vulnerability exploited last week to hack into Barracuda Email Security Gateway (ESG) appliances. Barracuda says its security solutions…
Announcing the Largest DoD Bug Bounty Challenge Ever: Hack the Air Force
The Air Force is asking hackers to take their best shot following the success of Hack the Pentagon and Hack the Army bug bounty challenges.…
HackerOne and JIRA integration update: more improvements, fewer clicks
Last month, we announced a major improvement to how HackerOne integrates with JIRA. We’re following that up with more good news around making simple cross-platform…
Ethical considerations of access to the HackerOne community
Since its founding, HackerOne has been on a mission to empower the world to build a safer internet. HackerOne helps over 800 diverse organizations collaborate…
Bug Bounty Programs — Why Should I Care?
Why should I care about bug bounty programs? Every digital company has software vulnerabilities, and they get expensive in case of a breach. The cost…
HackerOne’s Approach to Triage | HackerOne
By Jobert Abma This is part 1 in a series of blog posts on HackerOne’s Triage Services. Triage is critical to any vulnerability disclosure process…
Netflix’s Password-Sharing Crackdown Has Hit the US
TikTok user data is exposed to Chinese ByteDance employees, a screen recording app goes rogue in Google Play, and privacy groups want Slack to expand…
Visual Guide to Bug Bounty Programs
The Bug Bounty Field Manual is the definitive guide on how to plan, launch, and operate a successful bug bounty program. But 10,283 words is…