PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Reducing Risk With a Bug Bounty Program

hackerone.com | incident | #bug-bounty | #risk-reduction | #data-breach | #british-airways | #ico | #cost-analysis
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Comparing four major breaches, including British Airways' $230M ICO fine, with bug bounty prices, HackerOne estimates the exploited flaws would have cost $12K-$42K total to find and fix.
Published
Collected

Related coverage

incident · hackenproof.com
French Data Breach: MisterTemp Job Agency Exposed Millions of Records
An unprotected Elasticsearch cluster exposed 2.9 million French job-seeker records, including ID documents—what happened, and why the same company was breached again in 2026.
incident · hackenproof.com
LinkedIn Data Breach: 66 Million Scraped Records Exposed in an Unsecured Database
An open MongoDB database exposed 66 million scraped LinkedIn profiles—what was taken, whether scraping like this is legal, and how it compares to LinkedIn's larger 2021 incident.
incident · hackenproof.com
Adapt.io Data Breach: 9.3 Million Business Contact Records Exposed
An unprotected MongoDB database exposed 9.3 million B2B contact records tied to Adapt.io—what was found, the GDPR risk, and what buyers should know before using it today.
incident · hackenproof.com
FIESP Data Breach: 34 Million Brazilian Records Exposed in an Unsecured Elasticsearch Database
An unsecured Elasticsearch instance discovered via Binaryedge exposed 34.8 million FIESP-tied Brazilian personal records, including names, national ID numbers, home addresses, and contact details.
incident · hackenproof.com
New Data Breach Exposes 57 Million Records
HackenProof revisits the 2018 open-Elasticsearch breach of 57 million US records—and eight years of larger misconfiguration leaks since, a pattern that keeps growing rather than going away.
incident · hackenproof.com
Kars4Kids Data Breach: Donor Records and Admin Credentials Exposed
An unsecured MongoDB exposed emails, home addresses, and super admin credentials for 21,612 Kars4Kids donors, with a ransom note demanding 0.6 BTC found inside the database.
Back