PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

HackerOne Joins AWS Marketplace as Cloud Vulnerabilities Rise

hackerone.com | blog | #cloud | #cloud-security | #aws | #access-control | #information-disclosure | #hackerone | #ssrf | #vulnerability-trends
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

As organizations rush to the cloud, SSRF, improper access control and information disclosure now top HackerOne's severity list; SSRF payouts rose 103% year over year.
Published
Collected

Related coverage

blog · vercel.com
Mitigating Denial of Wallet risks with Vercel
Protect against Denial of Wallet (DoW) attacks with Vercel. DoW exploits cloud scalability to inflate costs. Vercel provides solutions like budget alerts, spend limits, and anomaly detection to safeguard workloads and maintain financial stability.
blog · vercel.com
Introducing Vercel Firewall and Vercel Secure Compute
Vercel Secure Compute and Vercel Firewall for enhanced protection of your applications on the frontend cloud
blog · hackerone.com
Measuring The Fix: How We Evaluate Frontier Models on Remediation Quality
HackerOne tested frontier models on security fix quality and found the judge mattered more than the model. See how CTEM remediation earns engineer trust.
blog · hackerone.com
Critical PHP Vulnerabilities: What Security Teams Need to Know
Learn about the critical PHP vulnerabilities, HackerOne’s response, and the rise in reports. Review patching guidance and coordinated disclosure practices.
blog · hackerone.com
How Model Evolution Has Reshaped Security AI Agents on H1 Platform
# How Model Evolution Has Reshaped Security AI Agents on H1 Platform October 1, 2026 Dan Mateer Director of Product, Code Security Robert Coleman Staff Software Engineer Image As models have...
blog · hackerone.com
Project Glasswing: What We Learned Running a Frontier Model on Our Own Codebase
HackerOne ran Anthropic's Mythos 5 model against its own production code; it surfaced a critical RCE spanning three safe-in-isolation commits, illustrating compositional risk that diff review misses.
Back