House passes bill requiring federal contractors to have vulnerability disclosure policies
The legislation to make contractors implement VDPs aligned with NIST guidelines is aimed at protecting Americans’ data, co-sponsor Rep. Nancy Mace says.
Advertisement
HackerOne
HackerOne urges U.S. to advocate for research protections in UN cybercrime treaty
The company responsible for bug bounty platforms warns in a letter to top U.S. officials that the treaty’s vague language could undermine ethical security research.
DOD expands vulnerability disclosure program, giving hackers more approved targets
The expansion comes as the DOD eyes broader changes for its Vulnerability Disclosure Program.
HackerOne, Verizon Media weigh pros and cons of making live hacking contests virtual
The good thing about it was that it was big. The bad thing about it? That it was big.
TikTok unveils bug bounty program, scraps with US government in court over looming ban
The video-sharing app is expanding its existing vulnerability disclosure program.
Advertisement
Security researchers slam Voatz brief to the Supreme Court on anti-hacking law
Much is at stake when the Supreme Court considers the Computer Fraud and Abuse Act.
Voatz urges Supreme Court to not protect ethical research from prosecution
The Boston-based company previously severed ties with a bug bounty platform over a discrepancy.
What Shopify has learned from five years of bug bounty programs
In this op-ed, a senior security engineer for Shopify discusses what has made the company's bug bounty program so successful. (Hint: it's the not the payouts.)
HackerOne cuts ties with mobile voting firm Voatz after it clashed with researchers
It's the first program that has ever been kicked off the HackerOne platform, according to a HackerOne spokesperson.
Cyber Command’s bug bounty program uncovers more than 30 vulnerabilities
The bug bounty program, sponsored by U.S. Cyber Command, zeroed in on finding vulnerabilities external to the Department of Defense Information Network.
Advertisement