Microsoft Teams phishing attack pushes DarkGate malware


A new phishing campaign is abusing Microsoft Teams messages to send malicious attachments that install the DarkGate Loader malware. [...]


https://www.bleepingcomputer.com/news/se...e-malware/

Google rolls out Privacy Sandbox to use Chrome browsing history for ads


Google has started to roll out its new interest-based advertising platform called the Privacy Sandbox, shifting the tracking of user's interests from third-party cookies to the Chrome browser. [...]


https://www.bleepingcomputer.com/news/go...y-for-ads/

'Evil Telegram' Android apps on Google Play infected 60K with spyware


Several malicious Telegram clones for Android on Google Play were installed over 60,000 times, infecting people with spyware that steals user messages, contacts lists, and other data. [...]


https://www.bleepingcomputer.com/news/se...h-spyware/

Associated Press warns that AP Stylebook data breach led to phishing attack

The Associated Press is warning of a data breach impacting AP Stylebook customers where the attackers used the stolen data to conduct targeted phishing attacks. [...]


https://www.bleepingcomputer.com/news/se...ng-attack/

What Is a Security.txt File and How Can It Help Your Security Program?

What is a security.txt file and how can it help your program?


https://www.hackerone.com/security-compl...ur-program

HackerOne’s In-Depth Approach to Vulnerability Triage and Validation

Triage and validation are at the heart of any bug bounty or Vulnerability Disclosure Program (VDP). Despite their central role, not all triage teams and workflows are created equal. 


https://www.hackerone.com/hackerones-dep...validation

5 Security Stages of the DevSecOps Pipeline

The DevSecOps pipeline follows the familiar DevOps “infinity loop” structure while incorporating some extra steps to ensure code security before, during, and after it’s pushed to production.


https://www.hackerone.com/application-se...s-pipeline

Benchmark Analysis: Annual Pentest and Code Review Coverage

How many annual pentests, code reviews, SAST/DAST scans should your organization conduct?


https://www.hackerone.com/penetration-te...w-coverage

Saxo Bank Celebrates One Year of Bug Bounties




https://www.hackerone.com/resources/hack...ka-hasling

100 Conversations with Start-up Security Leaders

Every day, HackerOne Solutions Engineer Chris Campbell speaks to cybersecurity leaders who struggle to keep up with the threat landscape. In this post, Chris shares the most impactful and common questions from his first 100 conversations with security professionals and how your organization can maximize its security outcomes.


https://www.hackerone.com/application-se...ty-leaders