Curated security research, vulnerabilities, advisories and tools for practitioners.

#bug-bounty

Security coverage tagged bug-bounty. (Page 15)

421.

‘AI slop’ bug reports and outsourcing triage, OpenPGP.js signature-spoofing bug, race to combat zero-day exploits – OffSec roundup for CISOs

vulnerability | 2025-06-16 09:19 | yeswehack.com | Original ↗ | .md | #ai-security | #bug-bounty | #zero-day

422.

‘Valuable for fast-growing, frequently updated platforms’: Gong OffSec lead on the merits of continuous, crowdsourced security testing

blog | 2025-06-18 11:45 | yeswehack.com | Original ↗ | .md | #ai-security | #bug-bounty | #devsecops

423.

Critical signature-spoofing vulnerability in OpenPGP.js hits the headlines

vulnerability | 2025-06-11 11:34 | CVE-2025-47934 | yeswehack.com | Original ↗ | .md | #bug-bounty | #cryptography | #vulnerability

424.

Recon Series #6: Excavating hidden artifacts with Wayback Machine and other web-archive tools

blog | 2025-06-13 13:00 | yeswehack.com | Original ↗ | .md | #bug-bounty | #osint | #recon

425.

This Is How They Tell Me Bug Bounty Ends

blog | 2025-06-09 00:00 | josephthacker.com | Original ↗ | .md | #ai-security | #bug-bounty | #vulnerability-research

426.

Dojo challenge #41 - Ruby treasure winners & writeup

blog | 2025-06-04 14:53 | yeswehack.com | Original ↗ | .md | #bug-bounty | #ruby | #ctf

427.

Bolt launches its public bug bounty engagement with Bugcrowd to secure its mobility app

blog | 2025-06-04 09:30 | bugcrowd.com | Original ↗ | .md | #bug-bounty | #bugcrowd | #vulnerability-disclosure

428.

AI bugSWAT in Tokyo & 2025 Hacker Roadshow

blog | 2025-06-03 00:00 | bughunters.google.com | Original ↗ | .md | #ai-security | #bug-bounty | #community

429.

Nuclei Templates Monthly - May 2025

vulnerability | 2025-05-31 17:59 | projectdiscovery.io | Original ↗ | .md | #bug-bounty | #rce | #cve

430.

45% Say Security Is Harder Now: Here’s How Defense in Depth Helps

blog | 2025-05-30 13:09 | hackerone.com | Original ↗ | .md | #bug-bounty | #attack-surface | #offensive-security

431.

Hacker spotlight: Ruikai Peng

blog | 2025-05-28 12:00 | bugcrowd.com | Original ↗ | .md | #bug-bounty | #rce | #black-hat

432.

Recon series #5: A hacker’s guide to Google dorking

blog | 2025-05-27 12:26 | yeswehack.com | Original ↗ | .md | #bug-bounty | #osint | #recon

433.

Authentication Bypass to RCE in Versa Concerto

vulnerability | 2025-05-21 19:36 | projectdiscovery.io | Original ↗ | .md | #bug-bounty | #rce

434.

Inside Security@ Dallas: Insights to Attract Elite Researchers and Prove ROI

research | 2025-05-21 13:28 | hackerone.com | Original ↗ | .md | #bug-bounty | #case-study | #hackerone

435.

Pentester spotlight: Alx

blog | 2025-05-22 12:00 | bugcrowd.com | Original ↗ | .md | #bug-bounty | #hardware-security | #mobile-security

436.

HackHER spotlight: Meet InsiderPhD

blog | 2025-05-20 12:00 | bugcrowd.com | Original ↗ | .md | #bug-bounty | #community | #education

437.

CVE-2025-4427/4428 : Ivanti EPMM Remote Code Execution - Technical Analysis

vulnerability | 2025-05-15 21:09 | projectdiscovery.io | Original ↗ | .md | #bug-bounty | #rce

438.

‘Airborne’ AirPlay attacks, netting $64k from deleted files, triaging AI slop – ethical hacker news roundup

blog | 2025-05-16 13:00 | yeswehack.com | Original ↗ | .md | #ai-security | #bug-bounty | #rce

439.

Beyond ‘../../’ - a practical guide to path traversal and arbitrary file read attacks

blog | 2025-05-15 12:51 | yeswehack.com | Original ↗ | .md | #bug-bounty | #arbitrary-file-read | #web-security

440.

Introducing the Engagement Simulator: Your blueprint for bug bounty ROI

blog | 2025-05-15 12:00 | bugcrowd.com | Original ↗ | .md | #ai-security | #bug-bounty | #bugcrowd

441.

Solving Vulnerability Management: ProjectDiscovery’s RSA Innovation Sandbox Win

vulnerability | 2025-05-06 17:21 | projectdiscovery.io | Original ↗ | .md | #ai-security | #bug-bounty

442.

From Report Chaos to Program Clarity: Meet Findings

blog | 2025-05-08 10:47 | hackerone.com | Original ↗ | .md | #bug-bounty | #vulnerability-management | #triage

443.

Community spotlight: ClassDojo

blog | 2025-05-07 12:00 | bugcrowd.com | Original ↗ | .md | #bug-bounty | #bugcrowd | #case-study

444.

How to retain hackers on your engagement

blog | 2025-05-06 12:00 | bugcrowd.com | Original ↗ | .md | #bug-bounty | #cloud | #bugcrowd

445.

Middleware mayhem, Zoolander banter PoC, Malta to pardon hackers over ‘unfair’ charges – ethical hacker news roundup

blog | 2025-04-30 13:20 | CVE-2025-29927 | yeswehack.com | Original ↗ | .md | #ai-security | #bug-bounty | #vulnerability-research

446.

Hacker spotlight: P3t3r_R4bb1t

blog | 2025-04-30 12:10 | bugcrowd.com | Original ↗ | .md | #bug-bounty | #community | #bugcrowd

447.

April 2025 Newsletter

blog | 2025-04-30 20:30 | projectdiscovery.io | Original ↗ | .md | #bug-bounty

448.

New Dojo sandbox environment for creating Ruby CTF challenges

blog | 2025-04-28 14:30 | yeswehack.com | Original ↗ | .md | #bug-bounty | #ruby-on-rails | #ruby

449.

Securing the distributed perimeter: How Elastic scaled proactive detection with ProjectDiscovery Cloud

vulnerability | 2025-04-24 21:46 | projectdiscovery.io | Original ↗ | .md | #bug-bounty | #cloud | #attack-surface

450.

GCP Cloud Configuration Review Templates - Nuclei Templates v10.2.0 🎉

tool | 2025-04-27 17:33 | projectdiscovery.io | Original ↗ | .md | #bug-bounty | #cloud

← Previous More →