H1-415 Recap: Oath Pays Over $400,000 to Hackers in One Day

Forty-one hackers representing 11 countries. More than $400,000 paid in bounties. All in nine hours. HackerOne’s second annual live-hacking event in San Francisco broke multiple records on Saturday, April 14, 2018. The target? Oath, a media and tech company, under which Yahoo, AOL, Verizon Digital Media Services, TechCrunch and many more dynamic brands fall.


https://www.hackerone.com/ethical-hacker...rs-one-day

Hursti hacks, DEF CON villages, and the Dubious state of electronic voting

Harri Hursti is one of the world’s leading authorities on election voting security. His work has exposed gaping security flaws in electronic voting machines and the electronic voting industry as a whole. He answered some of our questions on his hacking roots and why electronic voting is so easily hacked.


https://www.hackerone.com/ethical-hacker...nic-voting

Introducing The 90 day Hacker Leaderboard and Revamped Invitations

Hackers can now see how they ranked by their Reputation, Signal, and Impact in the last 90 days. Invitations going forward will be based on your activity during the last 90 days.


https://www.hackerone.com/ethical-hacker...nvitations

CISOs and GDPR: The Top 3 Concerns

In “The CISOs Guide to GDPR”, expert Thomas Fischer offered up the three main concerns he’s hearing most often from CISOs regarding GDPR.


https://www.hackerone.com/company-news/C...3-concerns

New Hacker101 Content: Threat modeling, Burp basics, and more

Since January, thousands of hackers have expressed their enthusiasm about the first Hacker101 content drop (almost 80,000 total video views and 8,800+ stars on GitHub in just six months!); and now it's time to take things to the next level.


https://www.hackerone.com/ethical-hacker...s-and-more

Hacker-Powered pen tests at the U.S. Federal Government

When looking for a model to inform your own security posture, the Department of Defense would be a good place to look. Not only were they the first branch of the U.S. Federal Government to use white-hat hackers back in 2016, they’ve been using hacker-powered security in new and interesting ways ever since. They’ve also blazed a trail for other public organizations.


https://www.hackerone.com/penetration-te...government

Hey Startups, Check Your GDPR Progress with this GDPR Checklist

The GDPR Checklist is just that: a checklist to make sure you’ve covered the basics concerning GDPR. It’s aimed at SaaS startups, but every company can benefit from its simple, easy to understand guidance.


https://www.hackerone.com/security-compl...-checklist

Jackpot! The h1-702 2018 CTF is here! Win a Trip to the Biggest Live-hacking Event o

H1-702 2018 is happening in Las Vegas from Wednesday, August 8 to Sunday, August 12! Any hacker from around the world who wants to attend can earn their way there. All you need to do is solve our CTF and write a great report. Six lucky winners will earn round trip airfare, seven nights at a hotel on the Las Vegas strip, and access to all five days of h1-702. 


https://www.hackerone.com/ethical-hacker...event-2018

Live-hacking Dropbox in Amsterdam for H1-3120

At H1-3120, Dropbox received more than 90 reports and paid out $80,383 with an average bounty of $1,318, over two times on their largest bounty day ever and almost three times their average bounty. Geweldig!


https://www.hackerone.com/ethical-hacker...am-h1-3120

Advanced triggers feature launches to further improve signal

Triggers are simple but powerful tools for executing automated responses to new, incoming reports. With triggers, you can set up an automated action when your program receives a report with or without a given trigger word. Triggers aid in reducing noise as they can flag certain reports.


https://www.hackerone.com/application-se...ove-signal