Retail & Hospitality

In this article, we’ll explain what DevSecOps is, how it differs from DevOps, and what security controls it should ideally incorporate. What is the Difference Between DevOps and DevSecOps? The...

Like triaging in a hospital emergency room, security issues must be diagnosed and handled by an expert as soon as they arrive. But it doesn’t stop there. Just as an ER needs good doctors, a triage...

When PullRequest was acquired, these concerns became HackerOne’s challenges. When we finalized the acquisition, we immediately added PullRequest’s assets to the scope of HackerOne’s own bug bounty...

Hello Hackers, Live Hacking Events are an experience like no other: hackers collaborate and connect with security teams, each other and HackerOne.  2022 is our fifth consecutive year of live...

First, I will discuss the inherent risks associated with M&As as attack surfaces grow. A Growing and Unprotected Attack Surface An ever-expanding attack surface is a global concern for most...

  Jessica Sexton, Director of Community (Twitter/LinkedIn) "I am excited to build a team and strategic programs that focus on human connection, growth, and personalized experiences on our...

From Jessica Sexton - Director of Community, Three years ago, I found my home at HackerOne. My primary focus was to revamp our Live Hacking Events program. Live Hacking Events are an amazing...

NOTE: The following code examples have been contrived to provide detailed, illustrative representations of real security issues I’ve found while reviewing code. They have not been pulled from...

Understanding Injection Vulnerabilities Injection vulnerabilities exist when information provided by users of the application is not properly validated or sanitized before it is used. In the case...

Background The vulnerability allows unauthenticated remote code execution (RCE). Exploitation occurs by sending an HTTP request with an attack payload to a vulnerable instance of Confluence,...

Accessing a major critical infrastructure network is very appealing to cybercriminals, as they can maximize societal impact and demand large ransom sums to fix tampered systems. With recent...