Curated security research, vulnerabilities, advisories and tools for practitioners.

#bug-bounty

Security coverage tagged bug-bounty.

1.

Neo v1 is now available for everyone

tool | 2026-09-16 00:19 | projectdiscovery.io | original ↗ | #bug-bounty | #cloud | #continuous-testing

2.

‘I usually choose targets that offer value to society’: krevetk0 on his principled approach to Bug Bounty hunting

blog | 2026-09-14 07:16 | yeswehack.com | original ↗ | #bug-bounty | #community | #responsible-disclosure

3.

PhantomRaven: An LLM-Generated Information Stealer Developed for Bug Bounty Hunting

blog | 2026-09-15 00:00 | crowdstrike.com | original ↗ | #ai-security | #bug-bounty | #supply-chain

4.

A Payment Platform for Security Researchers—No Bug Bounty Program Required

blog | 2026-09-14 14:14 | hackenproof.com | original ↗ | #bug-bounty | #vulnerability-disclosure | #payments

5.

Google Bug Hunters

blog | 2026-09-11 00:00 | bughunters.google.com | original ↗ | #bug-bounty | #vulnerability-research | #access-control

6.

CVE-2026-32475: Elementor Pro Forms Unauthenticated Arbitrary File Upload to RCE Lab & PoC

vulnerability | Critical | 2026-09-05 06:23 | CVE-2026-32475 | github.com | original ↗ | #bug-bounty | #rce | #wordpress

7.

YesWeHack joins G-Cloud framework for UK public-sector procurement after clearing rigorous evaluation

blog | 2026-09-08 06:54 | yeswehack.com | original ↗ | #bug-bounty | #cloud | #public-sector

8.

Flounder: Autonomous AI White-Hat Security Auditor with Execution-Grounded Verification

tool | 2026-09-06 22:13 | github.com | original ↗ | #ai-security | #bug-bounty | #web3

9.

How to use Codex for Bug Bounty research: explore broadly, validate rigorously

blog | 2026-09-03 07:04 | yeswehack.com | original ↗ | #bug-bounty | #vulnerability-research | #codex

10.

The latest from HackerOne

blog | 2026-09-01 14:53 | hackerone.com | original ↗ | #ai-security | #bug-bounty | #rce

11.

‘Having humans in the loop’: Crédit Agricole Personal Finance & Mobility on the value of Bug Bounty

blog | 2026-09-01 06:55 | yeswehack.com | original ↗ | #ai-security | #bug-bounty | #crowdsourced-security

12.

Ghost-Js-Burp-Extension: Burp Suite Extension to Detect Hardcoded Secrets & Endpoints in JavaScript

tool | 2026-08-31 23:54 | github.com | original ↗ | #bug-bounty | #cloud | #red-team

13.

Check Your Motor Oil Before Turbocharging: CVE-2026-7899, When V8's Optimization Engine Builds Up Carbon

research | 2026-08-27 00:00 | CVE-2026-7899 | nebusec.ai | original ↗ | #ai-security | #bug-bounty | #rce

14.

The hidden cost of agentic pentesting

blog | 2026-08-27 14:41 | bugcrowd.com | original ↗ | #ai-security | #bug-bounty | #pentesting

15.

How to Double-Check a Security Audit Without Paying for Another One

blog | 2026-08-27 12:57 | hackenproof.com | original ↗ | #bug-bounty | #pentesting | #appsec

16.

Dojo challenge #53 Hacker Club solution

blog | 2026-08-26 07:42 | yeswehack.com | original ↗ | #bug-bounty | #rce | #pentesting

17.

1inch Bug Bounty Report: Aqua Edition, H1 2026

blog | 2026-08-26 10:32 | hackenproof.com | original ↗ | #bug-bounty | #web3 | #smart-contracts

18.

Write triager-grade Bug Bounty reports with Claude Code: introducing the YesWeHack Claude Kit plugin

blog | 2026-08-25 13:02 | yeswehack.com | original ↗ | #ai-security | #bug-bounty | #claude-code

19.

CTEM for Enterprise: Scaling Continuous Exposure Management Across Complex Environments

blog | 2026-08-24 17:00 | hackerone.com | original ↗ | #ai-security | #bug-bounty | #cloud

20.

Bug Bounty Alternatives: What AI Security Testing Replaces, and What It Doesn't

blog | 2026-08-23 13:10 | borghq.io | original ↗ | #ai-security | #bug-bounty | #vulnerability-management

21.

Report Smarter, Not Harder: HackerOne's Case for Better CIRCIA Rules

blog | 2026-08-20 14:08 | hackerone.com | original ↗ | #bug-bounty | #cisa | #compliance

22.

Supply Chain Security Analysis of a 9.5M-Install VS Code Extension

vulnerability | 2026-08-16 13:08 | projectdiscovery.io | original ↗ | #bug-bounty | #supply-chain

23.

Cybersecurity Oversight Belongs to the Board

blog | 2026-08-18 19:40 | hackerone.com | original ↗ | #bug-bounty | #compliance | #eu

24.

Wiz Penetration Test Findings is now GA

blog | 2026-08-19 15:36 | wiz.io | original ↗ | #ai-security | #bug-bounty | #cloud

25.

One-upmanship on sandbox escapes, record-breaking Patch Tuesdays, the next evolution in pentesting – OffSec roundup for CISOs

research | 2026-08-14 06:39 | yeswehack.com | original ↗ | #ai-security | #bug-bounty | #pentesting

26.

How to Build a CTEM Program: A 90-Day Implementation Roadmap

blog | 2026-08-13 22:30 | hackerone.com | original ↗ | #bug-bounty | #ctem | #roadmap

27.

The OffSec challenge that hobbles security teams

blog | 2026-08-11 07:45 | yeswehack.com | original ↗ | #bug-bounty | #vulnerability-management | #offsec

28.

PimpMyCaido #1: Hunt client-side vulnerabilities with DOMLogger++

blog | 2026-08-06 07:47 | yeswehack.com | original ↗ | #bug-bounty | #web-security | #xss

29.

Testing AI-powered systems at scale via Bug Bounty, part 3: the guardrails

blog | 2026-07-29 07:06 | yeswehack.com | original ↗ | #ai-security | #bug-bounty | #featured

30.

Watching Agents Work: A Behavioral Audit of Offensive-Security LLM Runs

research | 2026-08-03 16:34 | projectdiscovery.io | original ↗ | #ai-security | #bug-bounty