ZERO DAILY
Hacking, AppSec, and Bug Bounty newsletter
2017-10-26 | Noobsec, Social engineering the social engineers, and Emoji subpoenas
Thursday, October 26
TOP STORY
-
Amanda Mork social engineered the social engineers at DEF CON
HACKTIVITY
-
Linux TBB SFTP URI allows local IP disclosure [40 upvotes] - $3,000 bounty for this report to Tor by @julianjackson.
-
Report Private Links Leaks to Google Analytics via Query String Param [47 upvotes] - swag awarded for this report to HackerOne by @reydd.
You can see all the latest and greatest disclosures and bounties on www.hackerone.com/hacktivity
OTHER ARTICLES WE’RE READING
-
Bad Rabbit technical analysis by @malwareunicorn
-
Noobsec by Kristina Elise
-
All day DevSecObs: Lending Club’s Ty Sbano talks bug bounties
ABOUT ZERO DAILY
Zero Daily is a daily newsletter that highlights application security, bug bounty, and hacker focused topics. The content is curated with love by @luketucker and brought to you by HackerOne.
Friends don’t keep good things to themselves - forward this to your homies and co-workers. BTW, want to see who runs bug bounties?
Have a news tip / story to highlight? We’d love to hear about it. Email: zerodaily@hackerone.com
Get this email forwarded to you? Click here to subscribe to the Zero Daily
BadRabbit does not use the EternalBlue exploit, but demonstrates yet again how these attacks continue to evolve and innovate their evasive techniques.
HackerOne is the #1 hacker-powered security platform, helping organizations find and fix critical vulnerabilities before they can be criminally exploited. As the contemporary alternative to traditional penetration testing, our bug bounty program solutions encompass vulnerability assessment, crowdsourced testing and responsible disclosure management. Discover more about our security testing solutions or Contact Us today.
