Detectify security updates for 10 January
For continuous coverage, we push out major Detectify security updates every two weeks, keeping our tool up-to-date with new findings, features and improvements sourced from…
Category: Mix
HackerOne is Excited to Launch Triage Ratings for Customers and Hackers
For customers and hackers, the triage experience is central to hacker-powered security. Our triagers consist of a globally distributed team of security analysts that triage…
What is server side request forgery (SSRF)?
Update: SSRF has been nominated in the new OWASP Top 10 of 2021. The list is currently pending peer reviews, but it would not be…
US Government Mandates Vulnerability Disclosure for IoT
This year has seen a rapid acceleration in the American government’s efforts to secure federal and state cyber infrastructure. This momentum has continued with the…
8 ways to create better cybersecurity awareness with a limited budget
Not all cybersecurity budgets are made equal, and for some that means having too many or too few tools. For others this means having few…
Announcing the HackerOne Brand Ambassadors
HackerOne Brand Ambassadors are leaders who have a passion to bring the community together in their local city or region. We are excited to announce…
Detectify security updates for 23 January
For continuous coverage, we push out major Detectify security updates every two weeks, keeping our tool up-to-date with new findings, features and improvements sourced from…
No. 380 – LLM-Mind-Reading, Automated War, Rusty Sudo, Eliezer Bitterness Theory…
Happy Conflu week, Well, I got sick (again) from RSA. The swag at these cons continues to decline. Still shipped an abridged newsletter though.…
HackerOne Joins AWS Marketplace as Cloud Vulnerabilities Rise
Addressing security risks at scale is more important than ever. With a global pandemic accelerating digital transformations, organizations are shipping new products and services at…
Eray Mitrani: Stumbling upon a new way to exploit authorization bypass in Jira
Eray Mitrani works for Nokia Deepfield where they are providing network analytics and DDoS-protections. He is also a security researcher in the Detectify Crowdsource community.…
VDPs are at the Heart of the Australian Cyber Security Centre’s Recommendations
2020 has been an important year for VDP standardization worldwide. Earlier in the year, the U.S. saw the release of the Cybersecurity and Infrastructure Security…
A guide to HTTP security headers for better web browser security – Detectify Blog
Happy Safer Internet Day! We teamed up with anti-malware company Malwarebytes to provide web browser security tips for both workplace Internet users and web developers. If you’re…