Security News

ThreatList: Bug Bounty Payouts Increase Six Percent for Critical Vulnerabilities
2018-07-13 16:30

HackerOne’s 2018 Hacker-Powered Security Report showed that the average award for critical vulnerabilities has increased.

HackerOne Bug Bounty Programs Paid Out $11 Million in 2017
2018-07-12 13:54

White hat hackers who responsibly disclosed vulnerabilities through bug bounty programs hosted by HackerOne earned more than $11 million last year, according to the company’s 2018 Hacker-Powered...

Two New Spectre-Class CPU Flaws Discovered—Intel Pays $100K Bounty
2018-07-11 11:48

Intel has paid out a $100,000 bug bounty for new processor vulnerabilities that are related to Spectre variant one (CVE-2017-5753). The new Spectre-class variants are tracked as Spectre 1.1...

Intel Pays $100,000 Bounty for New Spectre Variants
2018-07-11 05:13

Researchers have discovered new variations of the Spectre attack and they received $100,000 from Intel through the company’s bug bounty program. The new flaws are variations of Spectre Variant 1...

Navigating an Uncharted Future, Bug Bounty Hunters Seek Safe Harbors
2018-07-02 19:13

More companies are looking to adopt "safe harbor" language in their bug bounty programs to build trust with participants.

Newsmaker Interview: Marten Mickos the Future of Bug Bounty
2018-07-02 18:28

Mickos sat down with Threatpost's Lindsey O'Donnell to talk about bug bounty program opportunities, challenges, and ultimately how programs are evolving.

Bug Bounty Programs Turn Attention to Data Abuse
2018-07-01 19:19

More companies – particularly social media firms – may follow Facebook’s footsteps in turning to bug bounty programs to scout out any data privacy abuse on their platforms, experts say.

Facebook shells out $8k bug bounty after quiz web app used by 120m people spews profiles
2018-06-28 20:02

Infosec bod shops NameTests, claims leaky code exposes info Facebook has forked out an $8,000 reward after a security researcher flagged up a third-party web app that potentially exposed up to 120...

Facebook pays out $8,000 under data abuse bug bounty scheme
2018-06-28 20:02

Security researcher shops NameTests app as leaky javascript exposes user info Facebook has paid out $8,000 after a security researcher reported an app blabbing users’ info in what is possibly the...

Researchers claim Chrome bug bounty paid to the wrong people
2018-06-19 12:42

Yubico has been drawn into a rare public spat over how the discovery of a security flaw affecting it products was credited.