Security News

Yubico snatched my login token vulnerability to claim a $5k Google bug bounty, says bloke
2018-06-18 23:21

USB gizmo biz apologies amid infosec drama Yubico has apologized to a security vulnerability researcher who had complained the dongle peddler lifted his work to nab a $5,000 Google bug bounty.…

Surprise! Student receives $36,000 Google bug bounty for RCE flaw
2018-05-23 12:38

What's the only thing better than a bug bounty reward? A bug bounty reward you weren't expecting. Especially one that's worth $36,337.

Uber Tightens Bug Bounty Extortion Policies
2018-04-27 17:16

Uber is tightening policies around its bug bounty program after a 2016 data breach exposed deep flaws in its policies around handling extortion.

HackerOne CEO Talks Bug Bounty Programs at RSA Conference
2018-04-20 13:03

Can bug bounty programs be designed to protect consumer privacy and how do programs balance white hat disclosure versus companies sitting on vulnerabilities until they are fixed?

'Well intentioned lawmakers could stifle IoT innovation', warns bug bounty pioneer
2018-04-12 20:51

The pushback against regulation starts here IoT security regulations could stifle innovation without addressing the security problems at hand, a well-respected security researcher controversially argues.…

U.S. DoD Hopes To Stamp Out Threats With Bug Bounty Program
2018-04-02 20:57

The U.S. Department of Defense is the latest government entity to double down on vulnerabilities, on Monday announcing a new bug bounty program.

Facebook to extend bug bounty to cover data leakage, sever ties to data brokers
2018-04-01 00:00

The Social Network™ all-but-admits its previous legalese for developers was useless Facebook has outlined a set of changes to its platform that impact developers and data brokers.…

Facebook Cracks Down On Data Misuse With Expanded Bug Bounty Program
2018-03-27 19:17

Facebook announced that in the coming weeks it will expand its bug bounty program as the company cracks down on data misuse by app developers.

Netflix Launches Public Bug Bounty Program
2018-03-22 12:42

Netflix announced on Wednesday the launch of a public bug bounty program with rewards of up to $15,000, and Dropbox has made some changes to its vulnerability disclosure policy, promising not to...