Log4Shell: Attack Evolution
January 6th, 2022
For many security teams, the holiday season was spoiled by the challenging remediation of Log4Shell. The...
Vulnerability Management
We cover everything in vulnerability management including discovery, prioritization, assessment, disclosure, and remediation.
CWE (Common Weakness Enumeration) and the CWE Top 25 Explained
December 16th, 2021
Common Weakness Enumeration (CWE) is a system to categorize software and hardware security flaws...
Log4j Vulnerability Activity on the HackerOne Platform
December 13th, 2021
December 17th Update: Vulnerabilities in Log4j have been evolving over the course of this week since the...
What Is The Common Vulnerability Scoring System (CVSS)
December 9th, 2021
Organizations need to identify, prioritize, and remediate these vulnerabilities as soon as possible. CVSS is a...
How Hackers Help Organizations Face New Attack Vectors and Build Stronger Security Programs
December 7th, 2021
Among the topics they explored included the success of their long-running bug bounty programs in discovering...
Get the latest news and insights beamed directly to you
Vulnerability Management | A Complete Guide and Best Practices
December 2nd, 2021
What is vulnerability management? Vulnerability management is the process of continuously identifying...
Securing the Supply Chain by Working With Ethical Hackers
November 30th, 2021
At HackerOne’s recent Security@ global cybersecurity conference, three HackerOne experts—CTO and Co-founder...
Bug Bounty Platforms [Best Choices For a Bug Bounty Program]
November 18th, 2021
What Is a Bug Bounty Platform? A bug bounty platform is software that deploys and tracks a bug bounty program...