2020 Hacker Community Year in Review
Hackers are no stranger to finding creative ways to overcome obstacles, and 2020 presented numerous challenges for them to conquer. At HackerOne, we strive to…
Category: Mix
Detectify opens US office in Boston to accelerate growth
Stockholm, Sweden & Boston, MA – Detectify, a Swedish domain and web application security company, is launching its US operations in Boston, Massachussets. The company…
Oracle Opera Pre-Auth RCE (CVE-2023-21932) – Assetnote
Summary An attacker can obtain the JNDI connection name through servlets that leak this information. Due to the weak hardcoded cryptography used by Oracle Opera,…
The Rise of Misconfiguration and Supply Chain Vulnerabilities
Singapore-based telecom firm, Singtel, revealed last week it had suffered a security breach as a result of relying on an unpatched legacy file sharing product.…
Detectify security updates for 21 March
For continuous coverage, we push out major Detectify security updates every two weeks, keeping our tool up-to-date with new findings, features and improvements sourced from…
Apache Struts Vulnerabilities – Detectify Blog
Apache Struts is a well-known development framework for Java-based web applications that is mostly used in enterprise environments. If you search for Apache Struts CVEs…
PayPal is our Virtual Pal
In June, sixty-one hackers from thirteen countries gathered (virtually) to hack digital payments platform PayPal as part of HackerOne’s latest virtual hacking event, h1-2006. Hackers…
Welcome to Detectify’s Boston office!
Our brand new office in Boston, Massachusetts, is Detectify’s base for US sales operations. We had a chat with our US Head of Sales about…
The Rise of IDOR | HackerOne
Insecure Direct Object References (or IDOR) is a simple bug that packs a punch. When exploited, it can provide attackers with access to sensitive data…
Scaling up Security with DevOps and CI/CD practices
Some believe that “whatever can be automated, should be automated” and in general benefits include faster production, consistency in product and quality, rolling back from…
Security@ 2021 Call for Speakers is Open
HackerOne’s global Security@ conference is back for its fifth year on September 20, 2021. Today, we’ve opened our call for speakers! Are you interested in…
Detectify security updates for 4 April
For continuous coverage, we push out major Detectify security updates every two weeks, keeping our tool up-to-date with new findings, features and improvements sourced from…