HackerOne

Amazon Quick authorization bypass let users reach blocked AI chat agents

AI, AWS, Don't miss, HackerOne, Hot stuff, News, vulnerability, vulnerability disclosure /

Amazon Quick authorization bypass let users reach blocked AI chat agents 2026-05-12 at 20:12 By Mirko Zorz Enterprises running Amazon Quick, the AWS business intelligence and agentic AI service, rely on a feature called custom permissions to restrict who inside an account can use AI chat agents. Fog Security founder Jason Kao discovered that those […]

Amazon Quick authorization bypass let users reach blocked AI chat agents Read More »

HackerOne Employee Data Exposed in Massive Navia Breach

data breach, Data Breaches, HackerOne, Navia /

HackerOne Employee Data Exposed in Massive Navia Breach 2026-03-25 at 10:24 By Eduard Kovacs The cybersecurity firm said the personal information of hundreds of employees was stolen in the hacker attack targeting Navia. The post HackerOne Employee Data Exposed in Massive Navia Breach appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View

HackerOne Employee Data Exposed in Massive Navia Breach Read More »

HackerOne brings Agentic PTaaS to continuous, expert-validated pentesting

HackerOne, Industry news /

HackerOne brings Agentic PTaaS to continuous, expert-validated pentesting 2026-01-27 at 15:49 By Industry News HackerOne announced Agentic Pentest as a Service (Agentic PTaaS), delivering continuous security validation by combining autonomous agent execution with human expertise to ensure every finding reflects exploitable risk that security teams can trust and act on at scale. Enterprise security teams

HackerOne brings Agentic PTaaS to continuous, expert-validated pentesting Read More »

HackerOne extends Safe Harbor protections to AI testing

HackerOne, Industry news /

HackerOne extends Safe Harbor protections to AI testing 2026-01-20 at 17:02 By Industry News HackerOne has unveiled the Good Faith AI Research Safe Harbor, a new industry framework that establishes authorisation and legal protections for researchers testing AI systems in good faith. As AI systems scale rapidly across critical products and services, legal ambiguity around

HackerOne extends Safe Harbor protections to AI testing Read More »

Photos: Black Hat USA 2025

Black Hat USA 2025, Check Point, conferences, Don't miss, EasyDMARC, Elastic, Google, Gurucul, HackerOne, Keep Aware, News, Oleria, Pentera, Picus Security, SpyCloud, Stellar Cyber, Tines, Trend Micro, Veracode, VioletX, Vonahi Security /

Photos: Black Hat USA 2025 2025-08-07 at 11:38 By Help Net Security Here’s a look inside Black Hat USA 2025. The featured vendors are: Stellar Cyber, Vonahi Security, Gurucul, Check Point, HackerOne, EasyDMARC, Elastic, Google, Tines, Veracode, VioletX, Pentera, Keep Aware, Oleria, SpyCloud, Trend Micro and Picus Security. The post Photos: Black Hat USA 2025

Photos: Black Hat USA 2025 Read More »

XBOW’s AI reached the top ranks on HackerOne, and now it has $75M to scale up

Artificial Intelligence, Don't miss, HackerOne, News, penetration testing, XBOW /

XBOW’s AI reached the top ranks on HackerOne, and now it has $75M to scale up 2025-06-25 at 12:48 By Sinisa Markovic XBOW has raised $75 million in Series B funding to grow its AI-driven offensive security platform. The round was led by Altimeter’s Apoorv Agrawal, with participation from existing investors Sequoia Capital and Nat

XBOW’s AI reached the top ranks on HackerOne, and now it has $75M to scale up Read More »

Smart cybersecurity spending and how CISOs can invest where it matters

CISO, cybersecurity, Don't miss, HackerOne, Hot stuff, how-to, News, Optiv Security, security ROI, security spending, strategy, tips /

Smart cybersecurity spending and how CISOs can invest where it matters 2025-03-11 at 08:30 By Mirko Zorz CISOs face mounting pressure to spend wisely on security. Yet, many organizations remain vulnerable due to misplaced priorities and inefficient budgeting. This article explores common pitfalls and offers strategies to strengthen cybersecurity. Recent data highlights a paradox: while

Smart cybersecurity spending and how CISOs can invest where it matters Read More »

How human ingenuity continues to outpace automated security tools

Artificial Intelligence, cyber risk, cybersecurity, HackerOne, News, report, survey /

How human ingenuity continues to outpace automated security tools 2024-11-11 at 06:04 By Industry News 10% of security researchers now specialize in AI technology as 48% of security leaders consider AI to be one of the greatest risks to their organizations, according to HackerOne. HackerOne’s report combines perspectives from the researcher community, customers, and security

How human ingenuity continues to outpace automated security tools Read More »

Cybercrime’s constant rise is becoming everyone’s problem

Avast, Bitdefender, Bolster, cybercrime, cybersecurity, Expel, Gen, HackerOne, Video /

Cybercrime’s constant rise is becoming everyone’s problem 2024-10-18 at 06:31 By Help Net Security Cybercrime in recent years shows no signs of slowing down, with phishing attacks surging and ransomware tactics becoming more advanced, forcing organizations to constantly adapt their defenses. The rise of deepfake technology, especially in creating realistic audio impersonations, poses new dangers.

Cybercrime’s constant rise is becoming everyone’s problem Read More »

Rebrand, regroup, ransomware, repeat

cybercrime, Don't miss, HackerOne, Hot stuff, News, Ransomware, Video /

Rebrand, regroup, ransomware, repeat 2024-08-26 at 06:01 By Help Net Security Changes witnessed over the last few years have led to larger ransomware groups breaking into smaller units, posing more considerable challenges for law enforcement. Ransomware actors are evading arrest more easily and adapting methods with innovative technologies. In this Help Net Security video, Shobhit

Rebrand, regroup, ransomware, repeat Read More »

Red teaming: The key ingredient for responsible AI

Artificial Intelligence, bug bounty, cybersecurity, Don't miss, Expert analysis, Expert corner, hacker, HackerOne, Hot stuff, News, opinion, red team, regulation /

Red teaming: The key ingredient for responsible AI 2024-05-13 at 08:31 By Help Net Security Developing responsible AI isn’t a straightforward proposition. On one side, organizations are striving to stay at the forefront of technological advancement. On the other hand, they must ensure strict compliance with ethical standards and regulatory requirements. Organizations attempting to balance

Red teaming: The key ingredient for responsible AI Read More »

CVEMap: Open-source tool to query, browse and search CVEs

CISA, CVE, cybersecurity, Don't miss, GitHub, HackerOne, Hot stuff, News, open source, Project Discovery, software /

CVEMap: Open-source tool to query, browse and search CVEs 2024-02-01 at 07:01 By Mirko Zorz CVEMap is an open-source command-line interface (CLI) tool that allows you to explore Common Vulnerabilities and Exposures (CVEs). It’s designed to offer a streamlined and user-friendly interface for navigating vulnerability databases. Although CVEs are crucial for pinpointing and discussing security

CVEMap: Open-source tool to query, browse and search CVEs Read More »

Why cyberattacks mustn’t be kept secret

cyberattacks, cybersecurity, Don't miss, Expert analysis, Expert corner, Government, HackerOne, Hot stuff, News, opinion, regulation /

Why cyberattacks mustn’t be kept secret 2024-01-23 at 08:01 By Help Net Security No company is immune to cyberattacks, but when the inevitable happens, too many companies still try to maintain a wall of silence. In fact, over half of security professionals admit their organizations maintain a culture of security through obscurity, with over one-third

Why cyberattacks mustn’t be kept secret Read More »

HackerOne collaborates with Semgrep to streamline code review for modern development

HackerOne, Industry news, Semgrep /

HackerOne collaborates with Semgrep to streamline code review for modern development 2024-01-12 at 10:46 By Industry News HackerOne announced a partnership with code security solution, Semgrep, to combine Semgrep’s automated code security tools with expert support from HackerOne PullRequest code reviewers. Security teams can now analyze code through Semgrep and have PullRequest reviewers validate results

HackerOne collaborates with Semgrep to streamline code review for modern development Read More »

How EU lawmakers can make mandatory vulnerability disclosure responsible

cybersecurity, Don't miss, ENISA, EU, European Commission, Expert analysis, Expert corner, Government, HackerOne, Hot stuff, legislation, opinion, vulnerability disclosure /

How EU lawmakers can make mandatory vulnerability disclosure responsible 21/08/2023 at 07:33 By Help Net Security There is a standard playbook and best practice for when an organization discovers or is notified about a software vulnerability: The organization works quickly to fix the problem and, once a fix is available, discloses that vulnerability for the

How EU lawmakers can make mandatory vulnerability disclosure responsible Read More »

Photos: Infosecurity Europe 2023, part 3

Adaptiva, conferences, Edgescan, FireTail, HackerOne, Infosecurity Europe 2023, News, Silverfort, Swimlane, Vulcan Cyber, Yubico /

Photos: Infosecurity Europe 2023, part 3 22/06/2023 at 08:06 By Help Net Security Infosecurity Europe is taking place at ExCeL London from 20-22 June 2023 and Help Net Security is on site. The first gallery is available here, and the second gallery is here. Here’s a closer look at the conference featuring: Swimlane, Adaptiva, Vulcan

Photos: Infosecurity Europe 2023, part 3 Read More »

To enable ethical hackers, a law reform is needed

cybercriminals, cybersecurity, Don't miss, Expert analysis, Expert corner, hacker, HackerOne, Hot stuff, law, opinion, UK, vulnerability /

To enable ethical hackers, a law reform is needed 09/05/2023 at 08:13 By Help Net Security Organizations need to be able to match the ingenuity and resources of cybercriminals to better defend themselves against the increasing number of threats and attacks that could paralyze their business. Unfortunately, some laws restrict genuine security research. As we

To enable ethical hackers, a law reform is needed Read More »

Scroll to Top