PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

U.S. Senate Hearing - Data Security and Bug Bounty Programs: Lessons Learned

hackerone.com | blog | #bug-bounty | #government | #policy | #uber | #senate | #breach-notification
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

HackerOne CTO Alex Rice recounts testifying before a U.S. Senate subcommittee that weighed bug bounty programs against the 2016 Uber breach, discussing breach notification and FTC enforcement powers.
Published
Collected

Related coverage

blog · wiz.io
Securing Critical Infrastructure in the Cloud Era: A Policy and Technology Blueprint
Wiz calls for a policy-and-technology blueprint to secure critical infrastructure as power, water and healthcare systems move to the cloud, eroding traditional defenses against advanced adversaries.
blog · wiz.io
What the U.S. AI Action Plan Means For Cyber Defenders
Wiz reads the U.S. AI Action Plan for cyber defenders: accelerating AI adoption and building infrastructure also widens the attack surface, so it pairs speed with security foundations and governance.
blog · wiz.io
Biden's AI Executive Order: What it says, and what it means for security teams
A security-engineer breakdown of Biden's 2023 AI Executive Order: NIST safety and red-team testing standards, DHS critical-infrastructure oversight, and what it means for security and privacy teams.
blog · hackerone.com
Report Smarter, Not Harder: HackerOne's Case for Better CIRCIA Rules
This coverage gives security teams current context for monitoring, validation, and remediation.
blog · hackerone.com
London Called, Hackers Answered: Recapping h1-4420
HackerOne and Uber hosted their third live hacking event, h1-4420, in London: 36 hackers from 17 countries submitted 150+ unique vulnerabilities, earning $375,000 in bounties.
blog · hackerone.com
Bug Bounty 5 Years In
Guest post by Facebook's Collin Greene on five years of bug bounties: why the model beats traditional security spending, and lessons from launching the Facebook and Uber programs.
Back