PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

What's in a Name?

hackerone.com | vulnerability | #community | #history | #vulnerability-disclosure | #hackerone | #hacking-culture
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

On HackerOne's name and mission: honoring the original MIT 'hacker' spirit while tracing how vulnerability disclosure evolved from gag orders and lawsuits to collaborative bounty programs.
Published
Collected

Related coverage

blog · hackerone.com
Report Smarter, Not Harder: HackerOne's Case for Better CIRCIA Rules
This coverage gives security teams current context for monitoring, validation, and remediation.
blog · bugcrowd.com
The Hacker Culture Manual
Bugcrowd publishes The Hacker Culture Manual, a zine celebrating hacker culture through seven articles and a 2,000-hacker survey, written and designed entirely by humans without AI.
blog · wiz.io
Increasing transparency in cloud security: Wiz is now a CVE Numbering Authority (CNA)
Wiz became a CVE Numbering Authority able to assign CVE IDs and disclose cloud vulnerabilities—the latest step after helping build the community cloud vulnerability database.
vulnerability · yeswehack.com
CVE-2023-54391 and beyond: excavating silent patches and the attacker-defender information gap
CVE-2023-54391: a Proxmox VE auth bypass fixed silently in 2023, exploited in 2026 before any advisory. The piece taxonomizes 'silent patch gaps' and why AI-assisted diffing makes them cheap to mine.
vulnerability · hacktron.ai
CVE-2026-1731: Pre-Auth RCE in BeyondTrust Remote Support & PRA
Hacktron AI's agents found a critical pre-auth RCE in BeyondTrust Remote Support and older Privileged Remote Access versions, assigned CVE-2026-1731 with a CVSS 9.9 score.
vulnerability · projectdiscovery.io
Open by design, trusted by enterprises: how we keep Nuclei templates reliable at scale
Community-driven Nuclei templates stay enterprise-grade: each YAML template is lab-reproduced, checklist-hardened, and double-reviewed, proving exploitability instead of guessing from versions.
Back