Thursday, September 21
TOP STORY
:Facepalm: securityequifax2017.com.
HACKTIVITY
Access to GitLab's Slack by abusing issue creation from e-mail [12 upvotes] - no bounty for this report to GitLab by @intidc.
Homograph Attack Bypass [Tested on Linux & Windows] [9 upvotes] - $100 bounty for this report to Brave Software by @apapedulimu.
Hacktivity was on fire yesterday. Dropbox, Uber, TTS, DoD, Yahoo, Shopify, Twitter, WordPress, and others all posting bugs and bounties.
You can see all the latest and greatest disclosures and bounties on www.hackerone.com/hacktivity
TWEET OF THE DAY
Equifax just linked customers to my fake phishing version of their site by accident. https://twitter.com/Equifax/status/910265181976104960 … - @thesquashSH
OTHER ARTICLES WE’RE READING
SEC Discloses Edgar Corporate Filing System Was Hacked in 2016 [paywall]
Aurora operation still active per Intezers Jay Rosenberg after digging into CCleaner.
Dropbox tripling bounties for RCE and awarding bonuses, bonuses, bonuses
Auto Triage Bot by @ddworken
ABOUT ZERO DAILY
Zero Daily is a daily newsletter that highlights application security, bug bounty, and hacker focused topics. The content is curated with love by @luketucker and brought to you by HackerOne.
Friends don’t keep good things to themselves - forward this to your homies and co-workers. BTW, want to see who runs bug bounties?
Have a news tip / story to highlight? We’d love to hear about it. Email: zerodaily@hackerone.com
Get this email forwarded to you? Click here to subscribe to the Zero Daily
“Rather than spending tons and tons of money on technology, put a little bit of money on talent and have them do nothing but patching.”
Heather Adkins, Google Information Security Manager
HackerOne is the #1 hacker-powered security platform, helping organizations find and fix critical vulnerabilities before they can be criminally exploited. As the contemporary alternative to traditional penetration testing, our bug bounty program solutions encompass vulnerability assessment, crowdsourced testing and responsible disclosure management. Discover more about our security testing solutions or Contact Us today.