PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

TikTok Celebrates One Year of Bug Bounty

hackerone.com | blog | #bug-bounty | #case-study | #vulnerability-disclosure | #security-program | #hackerone | #tiktok | #security-operations
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

TikTok marks one year of its HackerOne bug bounty program, thanking 150+ hackers who reported over 225 vulnerabilities and highlighting transparency, fast payouts, and global security operations.
Published
Collected

Related coverage

blog · hackerone.com
Report Smarter, Not Harder: HackerOne's Case for Better CIRCIA Rules
This coverage gives security teams current context for monitoring, validation, and remediation.
blog · hackenproof.com
Inside American Express India's Cloud Storage Exposure
An open MongoDB exposed 3M American Express India records, including Aadhaar and PAN numbers. What happened, and does Amex run a bug bounty today?
blog · wiz.io
Wizards of security, casting spells on themselves for ultimate digital security
Wiz runs on Wiz: the security team details Wiz4Wiz, the internal instance used to monitor its own multi-cloud infrastructure, improve collaboration, and keep coverage without tuning overhead.
blog · netspi.com
Vulnerability Disclosure Submission Standard?
The author argues the industry lacks a standard vulnerability disclosure channel and proposes RFC2142 mailboxes such as security@ and abuse@ as a simple convention for routing reports.
research · wiz.io
Inside Grammarly’s AI-driven automation with the MCP Server for Wiz
Grammarly's security team uses the MCP Server for Wiz to build AI-driven automation — cutting manual triage and investigation time by over 90% and freeing engineers for strategic work.
blog · hackerone.com
Measuring The Fix: How We Evaluate Frontier Models on Remediation Quality
HackerOne tested frontier models on security fix quality and found the judge mattered more than the model. See how CTEM remediation earns engineer trust.
Back