A researcher discovered a session cookie risk that could have exposed private bugs on HackerOne, and questions remain about if data may have been taken. The risk for vulnerability coordination and bug ...
A HackerOne employee stole vulnerability reports submitted through the bug bounty platform and disclosed them to affected customers to claim financial rewards. The rogue worker had contacted about ...
HackerOne confirmed that an insider threat accessed confidential customer data, raising concerns for vulnerability reporting and bug bounty programs. In a blog post Friday, HackerOne disclosed a ...