PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

What Does Belgium’s New Legal Framework On Hacking Mean For Me?

hackerone.com | vulnerability | #vulnerability-disclosure | #policy | #ethical-hacking | #safe-harbor | #legal | #belgium
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Belgium's new law lets ethical hackers test any Belgian company without prior permission—a safe-harbor milestone—though mandatory central notification and approval of disclosures could weaken it.
Published
Collected

Related coverage

vulnerability · yeswehack.com
Coordinated Vulnerability Disclosure policy for a safer cyberspace
Argues coordinated vulnerability disclosure needs clear legal guidelines to thrive, noting fragmented EU interpretations of hacking and outlining how policy can make researcher reporting safer.
blog · hackerone.com
Report Smarter, Not Harder: HackerOne's Case for Better CIRCIA Rules
This coverage gives security teams current context for monitoring, validation, and remediation.
research · hackerone.com
A Safer Future for Security Research: Landmark Moves in Portugal and the UK
Portugal's new Article 7 safe harbor and the UK's proposed Computer Misuse Act defence mark major progress in protecting good-faith security research and coordinated vulnerability disclosure.
research · bugcrowd.com
[Guest Post] Atlassian Adopts Bug Bounty Safe Harbor to Further Enable Researchers
Atlassian adopts a safe harbor clause in its Bugcrowd bounty rules, promising no legal action against good-faith researchers, after rewarding nearly 400 vulnerabilities worth $400,000 since 2017.
research · bugcrowd.com
[GUEST POST] Standardizing Legal Safe Harbor for Security Research
Guest author Amit Elazari argues many bug bounty and VDP programs still lack legal safe harbor, calling for standardized language so researchers can test and disclose without legal exposure.
blog · ethiack.com
Pentesting no more: Why it's time to move from Pentesting to Ethical Hacking
Opinion piece: checklist-driven pentesting gives a false sense of security; the industry should move to continuous ethical hacking, as modeled by bug bounty and disclosure programs.
Back