Curated security research, vulnerabilities, advisories and tools for practitioners.

#disclosure

Security coverage tagged disclosure.

1.

AppFlowy Authenticated SQL Injection

vulnerability | 2026-08-15 05:06 | CVE-2026-16007 | projectblack.io | original ↗ | #sql-injection | #web-security | #vulnerability

2.

GPT-5.5: Democratizing Cyber Capabilities

blog | 2026-04-23 18:00 | xbow.com | original ↗ | #ai-security | #offensive-security | #openai

3.

Vulnerability or Not a Vulnerability?

blog | 2026-02-16 14:16 | CVE-2023-42282 | jfrog.com | original ↗ | #ai-security | #vulnerability-management | #open-source

4.

LiquidFiles Vulnerabilities: From Discovery to Disclosure

research | 2025-02-12 21:00 | projectblack.io | original ↗ | #vulnerability-research | #ruby | #semgrep

5.

The Rise of Bug Bounty Programs in S-1 Filings: A New Standard in Corporate Security

blog | 2024-09-11 21:22 | hackerone.com | original ↗ | #bug-bounty | #risk-management | #hackerone

6.

Capital One Launches Public Bug Bounty Program with HackerOne

blog | 2024-09-09 21:05 | hackerone.com | original ↗ | #bug-bounty | #hackerone | #banking

7.

Apple declines to pay Kaspersky vuln reward, Bug Bounty ‘extortion’ dispute, Microsoft Recall backlash – OffSec roundup for CISOs

blog | 2024-07-02 13:06 | yeswehack.com | original ↗ | #bug-bounty | #cloud | #apple

8.

HackerOne Company Values Matter: Default to Disclosure

blog | 2024-04-12 17:52 | hackerone.com | original ↗ | #hackerone | #company-culture | #disclosure

9.

US SEC cyber rules, SolarWinds CISO charges: How a unified OffSec strategy can enhance your SEC disclosures

blog | 2024-02-08 09:14 | yeswehack.com | original ↗ | #compliance | #offsec | #regulation

10.

Our Pwn2Own journey against time and randomness (part 2)

research | 2023-11-06 23:00 | blog.quarkslab.com | original ↗ | #firmware | #vulnerability | #netgear

11.

What Do New Cybersecurity Rules Mean For CISOs?

blog | 2023-10-05 20:13 | hackerone.com | original ↗ | #compliance | #cybersecurity-policy | #ciso

12.

New SEC Cyber Rules Incentivize Proactive Security Measures

blog | 2023-08-09 16:00 | hackerone.com | original ↗ | #compliance | #cybersecurity-policy | #sec

13.

Shopify Celebrates 5 Years on HackerOne

blog | 2020-05-05 15:00 | hackerone.com | original ↗ | #bug-bounty | #shopify | #milestone

14.

Transparency Builds Trust

blog | 2019-12-06 14:00 | hackerone.com | original ↗ | #bug-bounty | #incident-response | #hackerone

15.

Upserve Resolves Over 85 Bugs in Two Years Thanks to Hackers

blog | 2019-09-05 15:00 | hackerone.com | original ↗ | #bug-bounty | #case-study | #hackerone

16.

Don’t Believe These 4 Bug Bounty Myths

blog | 2019-08-22 17:00 | hackerone.com | original ↗ | #bug-bounty | #myths | #pentest

17.

Hacktivity Disclosure for Private Programs

vulnerability | 2018-12-10 17:00 | hackerone.com | original ↗ | #product-update | #hackerone | #transparency

18.

Why Ethics Matter in Bug Bounties

incident | 2018-01-24 00:00 | bugcrowd.com | original ↗ | #bug-bounty | #extortion | #data-breach

19.

Breach Basics: Preparation for the Inevitable

incident | 2017-11-28 20:00 | hackerone.com | original ↗ | #incident-response | #hackerone | #breach

20.

The Uber Breach: Extortion Does Not Equal Bug Bounty

blog | 2017-11-27 00:00 | bugcrowd.com | original ↗ | #bug-bounty | #extortion | #data-breach

21.

Eradicating image authentication injection from the entire internet

blog | 2017-05-10 00:00 | samcurry.net | original ↗ | #bug-bounty | #browser-security | #web-security

22.

The Importance of Scope – Bug Bounty Hunter Methodology

blog | 2017-02-08 00:00 | bugcrowd.com | original ↗ | #bug-bounty | #bugcrowd | #methodology

23.

Top 5 Most Viewed Reports For Q2 2016

vulnerability | 2016-08-26 08:00 | hackerone.com | original ↗ | #disclosure | #vulnerability-reports | #uber

24.

Top 5 Most Viewed Bugs of 2016

vulnerability | 2016-04-15 13:38 | hackerone.com | original ↗ | #bug-bounty | #rce | #hackerone