Category: Mix

My Career Just Got Hacked: Rana Robillard Joins HackerOne
08
May
2023

My Career Just Got Hacked: Rana Robillard Joins HackerOne

My career just got hacked.. and I couldn’t be more excited about it. Turns out, getting your career hacked* can…

CAPTCHA does not prevent cross-site request forgery (CSRF)
08
May
2023

CAPTCHA does not prevent cross-site request forgery (CSRF)

In our dialogues with customers, we often come across cross-site request forgery (CSRF) findings marked as False Positives due to having…

How Federal Agencies Use Vulnerability Disclosure Policies to Level Up Security
08
May
2023

Live hacking the U.S. Air Force, UK Ministry of Defence and Verizon Media in Los Angeles at h1-213

On November 6th, over 60 hackers descended on the City of Angels for the final HackerOne flagship live hacking event…

Detectify's Year in Review 2017
08
May
2023

Detectify’s Year in Review 2017

December is here again and the year is coming to a close even though it feels like it was January…

Six years of the GitHub Security Bug Bounty program
08
May
2023

Six years of the GitHub Security Bug Bounty program

This guest blog post was authored by Brian Anglin, Application Security Engineer at GitHub and originally published on the GitHub…

7 biggest security news of 2017
08
May
2023

7 biggest security news of 2017

Cloud security, ransomware, and poor incident responses have all shaped security discussions in 2017. Another interesting year in security has…

Hack for Good: Easily Donate Bounties to WHO’s COVID-19 Response Fund
08
May
2023

Hack for Good: Easily Donate Bounties to WHO’s COVID-19 Response Fund

The community has come together in some amazing ways to support COVID-19 relief efforts from Marc Rogers’ CTI League, the…

ACME TLS-SNI-01 shared hosting exploit using Let’s Encrypt
08
May
2023

ACME TLS-SNI-01 shared hosting exploit using Let’s Encrypt

On Tuesday, January 9, Detectify’s security advisor Frans Rosén discovered and reported a security issue in in TLS-SNI-01 validation in…

Crowdsourcing Racial Justice and Equality
08
May
2023

Live Hacking Goes Virtual | HackerOne

At a time when security must be managed remotely, HackerOne and Verizon Media called on the naturally remote and global…

GDPR computer
08
May
2023

GDPR security from an ethical hacker’s perspective

Discussions about the GDPR (General Data Protection Regulation) often touch upon security, a topic that few people know as well…

universal-business-components-miessler-may2023
08
May
2023

Universal Business Components (UBC) – Daniel Miessler

Seems like everyone, including me, is talking about how AI is going to take over everything. Cool, but what does…

Slack Increases Bounty Minimums For the Next 90 Days
08
May
2023

Slack Increases Bounty Minimums For the Next 90 Days

This blog post was contributed by Slack Staff Technical Program Manager Branden Jordan. Given the success of Slack’s previous promotion…