PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

New UK Legislation Must Protect Good-Faith Hackers

bugcrowd.com | blog | #vulnerability-disclosure | #policy | #ethical-hacking | #computer-misuse-act | #uk | #legal-protection
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Bugcrowd's CEO argues the UK's 33-year-old Computer Misuse Act needs reform: hacking is still technically illegal there, leaving ethical hackers unprotected despite policy encouraging their work.
Published
Collected

Related coverage

blog · bugcrowd.com
The UK’s Computer Misuse Act (1990) is up for revision. It’s time for ethical hackers to submit your views
The UK is consulting on revising the Computer Misuse Act (1990); Bugcrowd's Casey Ellis urges ethical hackers to submit views supporting a statutory defence for good-faith security research.
blog · portswigger.net
Business as usual
On UK Computer Misuse Act amendments outlawing supplying tools likely to be used offensively: weighing dual-use concerns for Burp, and CPS guidance recognising a legitimate security testing industry.
blog · hackerone.com
Report Smarter, Not Harder: HackerOne's Case for Better CIRCIA Rules
This coverage gives security teams current context for monitoring, validation, and remediation.
blog · ethiack.com
Pentesting no more: Why it's time to move from Pentesting to Ethical Hacking
Opinion piece: checklist-driven pentesting gives a false sense of security; the industry should move to continuous ethical hacking, as modeled by bug bounty and disclosure programs.
blog · bugcrowd.com
The hidden cost of agentic pentesting
Bugcrowd finds agentic pentesting tools submit overwhelmingly low-signal reports on public bug bounty programs, while top findings still come from skilled humans; triage absorbs the hidden cost.
blog · bugcrowd.com
Overview of new cybersecurity regulations and their impact on businesses
Overviews incoming UK and EU cybersecurity regulations—PSTI Act, NIS2, DORA and the CRA—outlining compliance duties, steep fines for noncompliance, and their GDPR-scale impact on supply chains.
Back