Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Changes to Disclosure Assistance

hackerone.com | blog | #bug-bounty | #rce | #vulnerability-disclosure | #policy | #hackerone | #disclosure-assistance

Summary

HackerOne revamped its Disclosure Assistance program: only high-impact bugs, such as SQLi, RCE, or bulk PII exposure at organizations lacking a VDP, will be pursued, with no guarantee of resolution.
Published
Collected

original ↗

Related coverage

  1. Report Smarter, Not Harder: HackerOne's Case for Better CIRCIA Rules (hackerone.com)
  2. Project Glasswing: What We Learned Running a Frontier Model on Our Own Codebase (hackerone.com)
  3. Access Denied (hackerone.com)
  4. The hidden cost of agentic pentesting (bugcrowd.com)
  5. A Payment Platform for Security Researchers—No Bug Bounty Program Required (hackenproof.com)
  6. A framework for successful vulnerability disclosure policy (yeswehack.com)

back