PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

It’s Phab-tastic! HackerOne integrates with Phabricator

hackerone.com | blog | #bug-bounty | #devops | #integrations | #workflow | #hackerone | #phabricator
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

HackerOne ships a Phabricator integration: two-way sync of comments and task status, one-click task creation from reports, and customizable fields — following JIRA to bridge security and dev.
Published
Collected

Related coverage

blog · hackerone.com
Slack Integration 2.0: Notification Filters, Multiple Channels, & Username Mentions
HackerOne ships Slack Integration 2.0 with notification filters, multiple channels and username mentions; GitHub's AppSec team explains splitting alerts into a bot-log channel and a triage channel.
blog · borghq.io
How Borg pushes findings to Linear, Jira, and GitHub automatically
Borg explains how Odin automatically pushes confirmed findings, with severity labels, reproduction steps, and suggested fixes, into Linear, Jira Cloud, and GitHub Issues, including setup guidance.
blog · hackerone.com
Measuring The Fix: How We Evaluate Frontier Models on Remediation Quality
HackerOne tested frontier models on security fix quality and found the judge mattered more than the model. See how CTEM remediation earns engineer trust.
blog · hackerone.com
Critical PHP Vulnerabilities: What Security Teams Need to Know
Learn about the critical PHP vulnerabilities, HackerOne’s response, and the rise in reports. Review patching guidance and coordinated disclosure practices.
blog · hackerone.com
Project Glasswing: What We Learned Running a Frontier Model on Our Own Codebase
HackerOne ran Anthropic's Mythos 5 model against its own production code; it surfaced a critical RCE spanning three safe-in-isolation commits, illustrating compositional risk that diff review misses.
blog · hackerone.com
CTEM for Enterprise: Scaling Continuous Exposure Management Across Complex Environments
This coverage gives security teams current context for monitoring, validation, and remediation.
Back