The Evolution of HackerOne’s Live Hacking Events
If you’ve heard of HackerOne, then you’ve heard about our Live Hacking Events. For years, we’ve been bringing together the brightest minds in security to…
Category: Mix
Reflected Cross-Site Scripting in cPanel (CVE-2023-29489) – Assetnote
Summary A reflected cross-site scripting vulnerability can be exploited without any authentication in affected versions of cPanel. The XSS vulnerability is exploitable regardless of whether…
How to Use Bug Bounty Program Data to Improve Security and Development
At HackerOne’s 2021 Security@ conference, two experienced HackerOne program managers, Allie Lugton and Denzel Duncan held a session on tracking and interpreting data from bug…
How to “winterize” and secure your eCommerce website for the holidays
With online retailers and shoppers busy focusing on the upcoming holiday shopping season, cybercriminals are on the hunt for unsuspecting victims to defraud. Don’t worry;…
Finding XSS in a million websites (cPanel CVE-2023-29489) – Assetnote
cPanel is a web hosting control panel software that is deployed widely across the internet. To be exact, there are about ~1.4 million installations of…
Bug Bounty vs. VDP | Which Program Is Right for You?
What Are the Key Differences between Bug Bounty and VDPs? A VDP is a structured method for third parties, researchers, and ethical hackers to report…
Continuously Hack Yourself because WAF security is not enough
Have the WAF security companies got you thinking that a firewall is enough? In a modern landscape, development and security move faster, and so do…
What Is a Bug Bounty? Should You Offer One? And How To Do It
What Is a Bug Bounty? A bug bounty is a reward offered by organizations to ethical hackers for discovering security vulnerabilities. A bug bounty program…
How Hackers Can Strengthen Cloud Security for Applications
What Does the Rise of Cloud Mean? According to Bressers, “It was easy to believe that your systems were secure in the past. They were behind…
How Elastic Attracts and Retains Top Hackers Without Offering the Highest Bounties
At HackerOne’s 2021 Security@ conference, we spoke with Douglas Day, an experienced ethical hacker and senior product security engineer who has managed Elastic’s bug bounty…
Meet the Team: Johan Svensson – Growing with Detectify
Johan Svensson joined Detectify as an intern in March 2017, and was hired full-time in October that same year. Now he works as a senior…
Bug Bounty Platforms [Best Choices For a Bug Bounty Program]
What Is a Bug Bounty Platform? A bug bounty platform is software that deploys and tracks a bug bounty program. A bug bounty is a…