Curated security research, vulnerabilities, advisories and tools for practitioners.

#legal

Security coverage tagged legal.

1.

Legal Boundaries of AI Penetration Testing: Engagements, Laws & Permissions

blog | 2026-08-04 12:00 | xbow.com | original ↗ | #ai-security | #pentesting | #agentic-ai

2.

Understanding Open-Source License Risk in Modern Software

blog | 2026-01-19 00:00 | aikido.dev | original ↗ | #supply-chain | #devsecops | #open-source

3.

A Safer Future for Security Research: Landmark Moves in Portugal and the UK

research | 2025-12-18 17:57 | hackerone.com | original ↗ | #bug-bounty | #vulnerability-research | #security-research

4.

A Partial Victory for AI Researchers

blog | 2025-01-10 18:37 | hackerone.com | original ↗ | #ai-security | #ai-safety | #red-team

5.

A Security Leader’s Guide to the New Product Liability Directive

blog | 2024-11-25 13:00 | bugcrowd.com | original ↗ | #ai-security | #cloud | #compliance

6.

Takeaways from the Dismissal of Most of the Government’s Case Against the SolarWinds CISO

blog | 2024-08-15 21:50 | hackerone.com | original ↗ | #regulation | #solarwinds | #legal

7.

HackerOne Responds To The Review of The UK’s Computer Misuse Act (CMA)

research | 2023-04-20 04:00 | hackerone.com | original ↗ | #security-research | #vulnerability-disclosure | #policy

8.

The UK’s Computer Misuse Act (1990) is up for revision. It’s time for ethical hackers to submit your views

blog | 2023-03-28 00:09 | bugcrowd.com | original ↗ | #bugcrowd | #vulnerability-disclosure | #policy

9.

What Does Belgium’s New Legal Framework On Hacking Mean For Me?

vulnerability | 2023-02-23 14:00 | hackerone.com | original ↗ | #vulnerability-disclosure | #policy | #ethical-hacking

10.

Coordinated Vulnerability Disclosure policy for a safer cyberspace

vulnerability | 2020-08-06 16:09 | yeswehack.com | original ↗ | #vulnerability-disclosure | #policy | #eu

11.

[Guest Post] Atlassian Adopts Bug Bounty Safe Harbor to Further Enable Researchers

research | 2019-05-01 00:00 | bugcrowd.com | original ↗ | #bug-bounty | #bugcrowd | #case-study

12.

Using FOSSA for License Compliance

blog | 2018-08-09 08:45 | hackerone.com | original ↗ | #open-source | #legal | #due-diligence

13.

[GUEST POST] Standardizing Legal Safe Harbor for Security Research

research | 2018-08-02 00:00 | bugcrowd.com | original ↗ | #bug-bounty | #security-research | #vulnerability-disclosure

14.

Morrison & Foerster’s David Newman: How Corporate Counsel Should Approach Hacker-Powered Security

blog | 2018-07-02 15:30 | hackerone.com | original ↗ | #bug-bounty | #vulnerability-disclosure | #policy

15.

An Attorney’s View of Vulnerability Disclosure

vulnerability | 2018-01-16 16:00 | hackerone.com | original ↗ | #vdp | #vulnerability-disclosure | #policy

16.

Breach Basics: Preparation for the Inevitable

incident | 2017-11-28 20:00 | hackerone.com | original ↗ | #incident-response | #hackerone | #breach

17.

Webinar Recap: Attorneys Chime in on Hacker-Powered Security

vulnerability | 2017-07-18 16:00 | hackerone.com | original ↗ | #vulnerability-disclosure | #policy | #webinar

18.

Bug Bounties: Risk and Reward

blog | 2016-10-13 00:00 | bugcrowd.com | original ↗ | #bug-bounty | #risk-management | #bugcrowd