PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Announcing the Results of the 12-month DIB-VDP Pilot

hackerone.com | blog | #vdp | #vulnerability-disclosure | #government | #hackerone | #department-of-defense | #dib-vdp
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

As the Defense Industrial Base VDP's 12-month pilot concluded, HackerOne interviewed participating DoD agencies and ethical hackers about results, standout vulnerabilities, and lessons learned.
Published
Collected

Related coverage

blog · hackerone.com
Critical PHP Vulnerabilities: What Security Teams Need to Know
Learn about the critical PHP vulnerabilities, HackerOne’s response, and the rise in reports. Review patching guidance and coordinated disclosure practices.
blog · hackerone.com
Report Smarter, Not Harder: HackerOne's Case for Better CIRCIA Rules
This coverage gives security teams current context for monitoring, validation, and remediation.
blog · hackerone.com
Nine Months into the DIB-VDP Pilot, Nearly 1,000 Valid Vulnerabilities Have Been Identified
Nine months into the DoD DIB-VDP pilot, 39 defense contractors joined and nearly 1,000 valid vulnerabilities were identified, with DC3 praising hackers' creativity in surfacing threats.
blog · hackerone.com
DOD's DIB-VDP Pilot Hits Six Month Milestone
At the six-month mark of the 12-month DOD DIB-VDP pilot, HackerOne reviews the Defense Industrial Base program's progress, federal hacker-engagement strategy, and impactful vulnerabilities found.
blog · hackenproof.com
Vulnerability Disclosure Policy: A Guide for Business Leaders
Explains what a vulnerability disclosure policy is and why the EU CRA and NIS2 now make it a compliance expectation, then walks through the key decisions behind each policy section, offering a free template for security and legal teams to adapt.
blog · tenzai.com
An open-weight model powered the #1 HackerOne VDP research operation
Tenzai's AI hacker topped the world's largest bug bounty leaderboard on GLM 5.2, a model anyone can download, and the offensive capability once limited to a few frontier labs is now within anyone's reach.
Back