OWASP TOP 10: Security Misconfiguration
Security misconfiguration is the fifth vulnerability on OWASP‘s list of the ten most common vulnerabilities. A proof of concept video follows this article. OWASP is…
Category: Mix
Discovering programs is easier than ever with the new and improved Program Directory
Today, we’re excited to announce an overhaul of the HackerOne Program Directory! Since its launch, Hackers have been using the Program Directory to find new…
Misconfigured email servers open the door to spoofed emails from top domains
TL;DR, Missing SPF records are a common and long-standing security issue that puts sensitive information at risk. To get a better idea of just how…
Security@ 2018: Sumo Logic’s CSO On Transparency and Using Hacker-Powered Pen Tests for Better Security and Complete Compliance
George Gerchow isn’t afraid to tell it like it is. As the CSO of Sumo Logic, he’s responsible for securing their cloud-native, machine data analytics…
IT Security FAQ: what should you do to protect yourself online? What is the number one everyday mistake people make?
There is a lot think about when it comes to security, but what is the one most important piece of advice a security expert can give?…
Security@ 2018: Oath, DoD Highlight Value in Bringing Bug Bounties to Life
Most hacker-powered security happens remotely, with digital messaging being the typical communication channel. There’s no brainstorming together with a whiteboard, no chats over coffee, no…
[Release] New dashboard, navigation and better support for unlimited scan profiles
Our next update is here! Two weeks ago we released the new scan profile overview to make it easier for you to work with security…
Integrate HackerOne directly into your website with Embedded Submissions
Receiving vulnerabilities has never been easier with the release of our newest integration: Embedded Submissions. What started with Email forwarding in 2017, is now being…
OWASP TOP 10: Sensitive Data Exposure
Update: The new OWASP Top 10 for 2021 proposed has grouped Sensitive Data Exposure with failures related to cryptography into a category called Cryptographic Failures.…
Shopify Awards $116,000 to Hackers in Canada: h1-514 Recap
Forty top hackers met in Montréal in mid-October to hack Canada-based Shopify. The commerce platform helps more than a half-million merchants spread across 90% of…
Security-focused Work Routine in 7 Steps
Security is not only a competitive edge, it’s a must. Companies will soon be compelled to implement a holistic security approach to keep up with…
[tl;dr sec] #182 – Cloud Native Security Talks, AI Attack Surface Map, Attacking and securing cloud identities in managed Kubernetes
Hey there, I hope you’ve been doing well! 📢 ICYMI AppOmni recently released a free tool that can evaluate your Salesforce instances for misconfigurations and…