OWASP API Security Top-10 for 2023 Risk Ratings
As you know by now, the final version of the OWASP API Security Top-10 2023 has been released. At first blush, the final 2023 release…
Category: Mix
OWASP API Security Top-10 Risks for 2023 Released
Back in April we took an in-depth look at the proposed OWASP Top-10 API Security Risks list for 2023. This Release Candidate (RC) contained a…
No. 385 Satellite hacking, Tree of Thoughts, Prompting Hierarchy…
*|INTERESTED:Memberful Plans:UL Subscription (Annual) (53074)|* *|END:INTERESTED|* *|INTERESTED:Memberful Plans:UL Subscription (Annual) (53074)|**|ELSE:|* *|END:INTERESTED|* Unsupervised Learning is a Security, AI, and Meaning-focused podcast that looks at how…
Audit the Security Posture of DevOps with HackerOne Source Code Assessments
Use Source Code Assessments to Audit DevOps DevOps teams may care about security, but it is not their area of expertise and it is not…
New Security Inbox & Dashboard
At HackerOne, we’re on a mission to empower the world to build a safer internet. Better security begins with a quality vulnerability coordination process, and…
HackerOne Reputation – Increasing Valid Bug Submissions and Signals
Edited on 12/11/2015 to reflect the latest Reputation implementation. One of the primary challenges when running a vulnerability coordination program is distinguishing signal from noise.…
Jingle Bugs – How to Rock in a Hard Place
A Look at 2014, Recommendations and New Year’s Resolutions for Security in 2015 and Beyond With the end of 2014 dashing to a close and…
The Tale of the Privacy Pink Panther
Last Friday, on my way home from 31c3, a funny thing happened on my way through Charles de Gaulle airport in Paris: I was required…
Q1-2023 API ThreatStats™ Report
According to a Mar-2022 API survey by Gartner, 98% of organizations use or are planning to use internal APIs – up from 88% in 2019.…
Computer Fraud and Abuse Act | Proposed CFAA Changes
Many security professionals, hackers, lawyers, law enforcement, and members of the media are keenly interested in the White House’s proposed changes to laws affecting Internet…
What’s in a Name? | HackerOne
While there are many interpretations of the word “hacker,” we choose to pay homage to the original MIT hackers by using the term in our…
The Wolves of Vuln Street
Research Highlights HackerOne has been working with economics and policy researchers from MIT and Harvard to study the economic forces behind the 0day market. Here’s…