Category: Mix

How Is API Abuse Different from Web Application Attacks by Bots?
27
Nov
2024

How Is API Abuse Different from Web Application Attacks by Bots?

API abuse and web application bot attacks are often confused. This is understandable, as both involve automated interactions and are…

Remote Code Execution with Spring Properties
27
Nov
2024

Remote Code Execution with Spring Properties

Recently a past student came to me with a very interesting unauthenticated vulnerability in a Spring application that they were…

Hackerone logo
26
Nov
2024

5 Insights Attendees Gained from the Security@ World Tour

If you weren’t lucky enough to catch us at a roadshow event, you’ll be delighted to know you can catch…

Evolving attack techniques and tactics
22
Nov
2024

Evolving attack techniques and tactics

As cyber attackers refine their skills, their methods evolve to exploit vulnerabilities in innovative and increasingly difficult-to-detect ways. The modern…

Hackerone logo
21
Nov
2024

How an MFA Bypass Led to Account Takeover [Plus 11 Authentication Tips]

Many Facets, One Goal A common trope in cybersecurity is “don’t roll your own auth.” There’s a reason for this: implementing…

Hackerone logo
20
Nov
2024

$100 Million Paid – One Billion in Sight for Hackers

One hundred million is an enormous number. Today we celebrate with all our hackers the phenomenal milestone of a hundred…

Hackerone logo
20
Nov
2024

There is no room for racism or inequality here.

The merciless killing by police of George Floyd laid bare, once again, the institutionalized racism that plagues the USA. It…

Hackerone logo
20
Nov
2024

How HackerOne Employees Stay Connected and Have Fun

This year, we launched new initiatives designed to bring people together in fun and innovative ways, including playing online games,…

Frontview Mirror: 2025 Edition
20
Nov
2024

Frontview Mirror: 2025 Edition

.bh__table, .bh__table_header, .bh__table_cell { border: 1px solid #C0C0C0; } .bh__table_cell { padding: 5px; background-color: #FFFFFF; } .bh__table_cell p { color:…

Hackerone logo
20
Nov
2024

Hacking for Good | HackerOne

We start the new year of 2020 with great prospects. First of all, 2019 turned out to be a massive…

Hackerone logo
19
Nov
2024

How REI Strengthens Security with HackerOne’s Global Security Researcher Community

Q: Please introduce yourself. Tell us what you do at REI and why cybersecurity is important to REI. A: I’m…

Best Practices for API Discovery and Management
19
Nov
2024

Best Practices for API Discovery and Management

APIs are the backbone of interconnected applications, enabling organizations to innovate, integrate, and scale rapidly. However, as enterprises continue to…