PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Disclosure Assistance Refresh

hackerone.com | vulnerability | #product-update | #responsible-disclosure | #hackerone | #disclosure-assistance | #coordination
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

HackerOne refreshes its Disclosure Assistance service: a new form captures prior contact attempts, vulnerability type and affected assets to help connect friendly hackers with organizations.
Published
Collected

Related coverage

vulnerability · hackerone.com
411 for Hackers: Disclosure Assistance
HackerOne's Disclosure Assistance helps researchers report bugs to organizations lacking disclosure programs — 94% of the Forbes Global 2000 — via its Directory and a mediated process.
vulnerability · hackerone.com
What Is a Bug Bounty? Should You Offer One? And How To Do It
A primer on bug bounties: how public and private programs work, what makes a good scope and vulnerability report, and when to add bounties to your vulnerability management strategy.
vulnerability · hackerone.com
Vulnerability Disclosure | What’s the Responsible Solution?
Explains how vulnerability disclosure works, why friction arises between researchers and organizations over timing, and the coordinated disclosure practices that keep both sides constructive.
vulnerability · hackerone.com
What is a Responsible Disclosure Policy and Why You Need One
A vulnerability disclosure policy (VDP) gives ethical hackers a clear, legal way to report bugs; the DoD alone has received 5,000+ valid reports through its policy — a strong case for adopting one.
vulnerability · hackerone.com
ASUS Vulnerability Disclosure Déjà vu
HackerOne flags ASUS's repeated disclosure failures: a researcher's LiveUpdater remote-code-execution report was deflected for weeks before public disclosure, echoing ASUS's 2014 FTC case.
vulnerability · bishopfox.com
Zero-Day Collaboration: Working With Imperva to Eliminate a Critical Exposure
Bishop Fox found a WAF bypass in Imperva's Cloud WAF letting attackers evade rules with malicious POST payloads such as Log4j exploits and SQL injection; Imperva patched within days.
Back