PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Get Invited: How Live Hacking Event Invites Have Changed

hackerone.com | blog | #bug-bounty | #community | #hackerone | #live-hacking-event | #invitations | #criteria
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

HackerOne's 2022 Live Hacking Events paid out $4.9M+ to 311 hackers across five events, and 2023 invitations now hinge on a clean conduct record, sanctioned-region checks, and recent hacking activity.
Published
Collected

Related coverage

blog · hackerone.com
Live Hacking Events: Stats, invitations, and what’s next
A look at HackerOne's live hacking events, from their 2015 DEF CON origins to how invited hackers attack time-boxed scopes for bounties and awards, with CTF contests serving as a common invitation path.
blog · hackerone.com
Measuring The Fix: How We Evaluate Frontier Models on Remediation Quality
HackerOne tested frontier models on security fix quality and found the judge mattered more than the model. See how CTEM remediation earns engineer trust.
blog · hackerone.com
Critical PHP Vulnerabilities: What Security Teams Need to Know
Learn about the critical PHP vulnerabilities, HackerOne’s response, and the rise in reports. Review patching guidance and coordinated disclosure practices.
blog · hackerone.com
Project Glasswing: What We Learned Running a Frontier Model on Our Own Codebase
HackerOne ran Anthropic's Mythos 5 model against its own production code; it surfaced a critical RCE spanning three safe-in-isolation commits, illustrating compositional risk that diff review misses.
blog · hackerone.com
CTEM for Enterprise: Scaling Continuous Exposure Management Across Complex Environments
This coverage gives security teams current context for monitoring, validation, and remediation.
blog · hackerone.com
Report Smarter, Not Harder: HackerOne's Case for Better CIRCIA Rules
This coverage gives security teams current context for monitoring, validation, and remediation.
Back