PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Webinar Recap: Attorneys Chime in on Hacker-Powered Security

hackerone.com | vulnerability | #vulnerability-disclosure | #policy | #webinar | #cfaa | #legal
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Webinar recap with Wiley Rein attorneys: CFAA penalties apply even to well-intentioned hackers, so disclosure programs and bounties increasingly define safe rules of engagement.
Published
Collected

Related coverage

vulnerability · hackerone.com
An Attorney’s View of Vulnerability Disclosure
Attorney Matthew J. Gardner explains how vulnerability disclosure programs resolve CFAA ambiguity around white-hat hacking by establishing consent—plus what to weigh when crafting a VDP.
vulnerability · yeswehack.com
Coordinated Vulnerability Disclosure policy for a safer cyberspace
Argues coordinated vulnerability disclosure needs clear legal guidelines to thrive, noting fragmented EU interpretations of hacking and outlining how policy can make researcher reporting safer.
blog · hackerone.com
Report Smarter, Not Harder: HackerOne's Case for Better CIRCIA Rules
This coverage gives security teams current context for monitoring, validation, and remediation.
vulnerability · hackerone.com
What Does Belgium’s New Legal Framework On Hacking Mean For Me?
Belgium's new law lets ethical hackers test any Belgian company without prior permission—a safe-harbor milestone—though mandatory central notification and approval of disclosures could weaken it.
vulnerability · hackerone.com
Proposed Changes to the Computer Fraud and Abuse Act, Austin Powers, and You
Why proposed CFAA amendments alarm security researchers: expanded language could criminalize routine vulnerability research and testing — HackerOne urges cooperation over prosecution.
vulnerability · yeswehack.com
CVE-2023-54391 and beyond: excavating silent patches and the attacker-defender information gap
CVE-2023-54391: a Proxmox VE auth bypass fixed silently in 2023, exploited in 2026 before any advisory. The piece taxonomizes 'silent patch gaps' and why AI-assisted diffing makes them cheap to mine.
Back