PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Hacking for Good

hackerone.com | vulnerability | #bug-bounty | #vulnerability-disclosure | #hackerone | #industry-trends | #annual-review | #hacker-powered-security
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

HackerOne CEO Marten Mickos recaps 2019: $35 million paid in bounties and growing adoption of coordinated vulnerability disclosure by US agencies, EU regulators and major corporations worldwide.
Published
Collected

Related coverage

blog · hackerone.com
Report Smarter, Not Harder: HackerOne's Case for Better CIRCIA Rules
This coverage gives security teams current context for monitoring, validation, and remediation.
blog · hackerone.com
Introducing the 4th Annual Hacker-Powered Security Report
The 4th annual Hacker-Powered Security Report: pandemic-era digital transformation expands attack surfaces, pushing organizations from the DoD to Goldman Sachs toward hacker-powered security.
vulnerability · hackerone.com
Why Every Federal Agency Needs a VDP
A CISA draft directive requires all US federal civilian agencies to publish a vulnerability disclosure policy, following the DoD VDP model that surfaced 12,000+ vulnerabilities in three years.
vulnerability · hackerone.com
How the Risk-Averse DoD Learned to Stop Worrying and Love the Hackers
A Security@ 2019 panel traces how the US DoD embraced hackers: its VDP and bounties surfaced 11,000+ valid vulnerabilities, saved taxpayers $64 million in three years and returned roughly 800% ROI.
vulnerability · yeswehack.com
CVE-2023-54391 and beyond: excavating silent patches and the attacker-defender information gap
CVE-2023-54391: a Proxmox VE auth bypass fixed silently in 2023, exploited in 2026 before any advisory. The piece taxonomizes 'silent patch gaps' and why AI-assisted diffing makes them cheap to mine.
vulnerability · projectdiscovery.io
Introducing Neo Triage
On October 26, 2026 we're releasing Neo Triage, an autonomous engine for vulnerability triage. While other tools rank your backlog, Neo clears it.
Back