Holistic API Security Strategy for 2023
In the digital landscape of 2023, Application Programming Interfaces (APIs) have taken center stage in business operations. APIs act as the backbone of many digital…
Category: Mix
Patch Diffing Progress MOVEIt Transfer RCE (CVE-2023-34362) – Assetnote
In the last few days, threat actors have been exploiting a critical pre-authentication vulnerability within Progress MOVEIt Transfer. There have been several great blog posts…
[tl;dr sec] #185 – Artisanal to Industrial Security, Securing the EC2 Instance Metadata Service, 12 Threat Modeling Methods
Hey there, I hope you’ve been doing well! 🚨 Changing Platforms 🚨 Over the next few weeks I’m going to be changing two important things…
Seven Essential Components Of A Top-Tier Attack Surface Management Program
1. Discover and Import Maintaining an up-to-date inventory of all your internet-facing assets is crucial for effective risk management. HackerOne automates continuous attack…
How To Write A Good Report
Writing a good report is as important as finding the vulnerabilities. Providing an unclear proof of concept can slow down the process of triaging your…
Our latest integration – Slack
We’re happy to share that Intigriti now integrates with Slack, a top business communication tool used widely across industries. This feature allows automatic updates to…
OWASP API Security Top-10 for 2023 Risk Ratings
As you know by now, the final version of the OWASP API Security Top-10 2023 has been released. At first blush, the final 2023 release…
OWASP API Security Top-10 Risks for 2023 Released
Back in April we took an in-depth look at the proposed OWASP Top-10 API Security Risks list for 2023. This Release Candidate (RC) contained a…
No. 385 Satellite hacking, Tree of Thoughts, Prompting Hierarchy…
*|INTERESTED:Memberful Plans:UL Subscription (Annual) (53074)|* *|END:INTERESTED|* *|INTERESTED:Memberful Plans:UL Subscription (Annual) (53074)|**|ELSE:|* *|END:INTERESTED|* Unsupervised Learning is a Security, AI, and Meaning-focused podcast that looks at how…
Audit the Security Posture of DevOps with HackerOne Source Code Assessments
Use Source Code Assessments to Audit DevOps DevOps teams may care about security, but it is not their area of expertise and it is not…
New Security Inbox & Dashboard
At HackerOne, we’re on a mission to empower the world to build a safer internet. Better security begins with a quality vulnerability coordination process, and…
HackerOne Reputation – Increasing Valid Bug Submissions and Signals
Edited on 12/11/2015 to reflect the latest Reputation implementation. One of the primary challenges when running a vulnerability coordination program is distinguishing signal from noise.…