The Tale of the Privacy Pink Panther
Last Friday, on my way home from 31c3, a funny thing happened on my way through Charles de Gaulle airport in Paris: I was required…
Category: Mix
Q1-2023 API ThreatStats™ Report
According to a Mar-2022 API survey by Gartner, 98% of organizations use or are planning to use internal APIs – up from 88% in 2019.…
Computer Fraud and Abuse Act | Proposed CFAA Changes
Many security professionals, hackers, lawyers, law enforcement, and members of the media are keenly interested in the White House’s proposed changes to laws affecting Internet…
What’s in a Name? | HackerOne
While there are many interpretations of the word “hacker,” we choose to pay homage to the original MIT hackers by using the term in our…
The Wolves of Vuln Street
Research Highlights HackerOne has been working with economics and policy researchers from MIT and Harvard to study the economic forces behind the 0day market. Here’s…
Hacker E-Book| Helping You Hack, Learn and Earn
A world wide war is being waged in which the most able-bodied soldiers are being discouraged from enlisting. It is an information security war, and…
Where’s that Security@? | HackerOne
All technology contains bugs. These bugs frequently have security implications that may be exploited by criminals, but are more often discovered by friendly parties —…
Improving Signal Over 10,000 Bugs
On July 2nd, 2015, HackerOne reached 10,000 valid security vulnerabilities resolved on our platform – that’s 10,000 fewer ways for attackers to exploit users, steal…
6 Tools Slated To Come Out Of Black Hat
By Ericka Chickowski Security summer camp is upon us as Black Hat is just a few days away. The infosec community was busy with research…
Security Leads Share Bug Bounty Program Tips
Yesterday, I ran an invitational security panel featuring security leads from large and small companies with varying levels of vulnerability disclosure programs. We curated the…
6 Reasons Your Security Recruiting Sucks
By Ericka Chickowski As we discussed in our previous blog, the security skills shortage may not be quite as real as some industry reports claim…
Measuring Success in Vulnerability Disclosure
By HackerOne Customer Success and Data Science Teams At HackerOne, we’re deeply interested in the success of vulnerability disclosure programs, and are constantly striving to…