News May 22, 2023

Google’s bug bounty hits $12 million: What about the risks?

4 min read - Bug bounty numbers have never been better. In 2022, Google rewarded the efforts of over 700 researchers from 68 different countries who helped improve the security of the company’s products and services. The total amount of awards grew from $8.7…

Incident Response January 7, 2022

5 Things New with Bug Bounty Programs

4 min read - On September 29, HackerOne announced the latest version of its Internet Bug Bounty (IBB) program. This initiative helped to coordinate the discovery of more than 1,000 security weaknesses in open-source software between 2013 and 2021. HackerOne’s latest version aims to…

Risk Management May 31, 2021

Strike First: The Benefits of Working With an Ethical Hacker

3 min read - With cybersecurity attacks on the rise, companies must explore new ways to stay one step ahead of threat actors. IDG Research Services found that 78% of IT leaders are not confident in their companies’ security postures, which lead 91% of organizations…

Risk Management October 12, 2020

Are Bug Bounty Programs Worth It?

6 min read - Bug bounty programs are on the rise, and participating security researchers earned big bucks as a result. According to a report released by HackerOne in February 2020, hackers had collectively earned approximately $40 million from those programs in 2019. This…

Application Security June 14, 2018

Can a Mature Bug Bounty Program Help Solve the Security Talent Shortage?

4 min read - With a well-planned, mature bug bounty program, security leaders can lessen the impact of the security talent shortage by tapping the white-hat hacker community.

August 4, 2017

DOJ Issues Framework for Vulnerability Disclosure Programs

2 min read - The Department of Justice (DOJ) offered guidance on vulnerability disclosure programs, which will assist organizations in navigating legal issues.

June 8, 2017

Application Security Report Calls Out Problems in Mobile, IoT Devices and DevOps

2 min read - High-Tech Bridge released a report at InfoSecurity Europe 2017 highlighting some of the fastest growing application security threats to developers.

April 17, 2017

Magneto Vulnerability: Cybercriminals Drawn to E-commerce Exploit

2 min read - A newly released Magneto vulnerability comes with serious risk of total e-commerce compromise. Here's what businesses and shoppers need to know.

March 22, 2017

Burgenoning Bug Bounty Programs Up the Ante

2 min read - Bug bounty programs are now paying out more to white-hat hackers, but they're also tightening regulations on payments and structure.

March 7, 2017

Widespread Bug Bounty Program Could Help Harden Open Source Security

2 min read - As part of HackerOne's effort to improve open source security, the vulnerability disclosure firm made its bug bounty program available for free.