bug hunting

Researchers working on tools that aim to eliminate computer bugs

May 6, 2019

It’s bad enough losing an hour’s work when your computer crashes – but in settings like healthcare and aviation, software glitches can have far more serious consequences. In …

Should we add bugs to software to put off attackers?

August 8, 2018

A group of New York University researchers are testing a new approach to software security: adding more bugs to it instead of removing them. The idea is to “drown …

Vulnerability research and responsible disclosure: Advice from an industry veteran

July 23, 2018

“Everything changes once you have to supervise and mentor and schedule and coordinate and keep in mind all the things others don’t. You often have to hold back your own …

Hacker-powered security is reaching critical mass

July 12, 2018

HackerOne announced findings from the 2018 Hacker-Powered Security Report, based on over 72,000 resolved security vulnerabilities, 1,000 customer programs and more than $31 …

Crowdsourced security trends: Payouts to hackers increase

June 7, 2018

Bugcrowd has released the 2018 Bugcrowd State of Bug Bounty Report, which analyzes proprietary platform data collected from more than 700 crowdsourced security programs …

Is ethical hacking more lucrative than software engineering?

January 18, 2018

HackerOne published its 2018 Hacker Report, which examines the geography, demographics, experience, tools used and motivations of nearly 2,000 bug bounty hackers across 100 …

What motivates bug hunters?

November 16, 2017

Crowdsourced security penetration testing outfit Bugcrowd has released its second annual “Mind of a Hacker” report, to provide insight into bug hunters’ …

Google wants bug hunters to probe popular Android apps for bugs

October 19, 2017

Google has started another bug bounty initiative: the Google Play Security Reward Program. While the name of the program might suggest that bug hunters will be after …

The Internet Bug Bounty offers rewards for bugs in data processing libraries

October 2, 2017

The Internet Bug Bounty (IBB), a project aimed at finding and fixing vulnerabilities in core internet infrastructure and free open source software, has announced that it will …

WordPress announces bug bounty program

May 17, 2017

WordPress Foundation is the latest organization to publicly announce a bug bounty program set up on the HackerOne platform. What’s in scope of the WordPress bug bounty …

Google, Microsoft increase bug bounties

March 6, 2017

Bug hunters, rejoice: both Google and Microsoft have announced a considerable increase of the amount they will pay out for information about bugs in their products. Google ups …

Project Springfield: Cloud-based fuzz testing for uncovering million-dollar bugs

September 27, 2016

This Moday Microsoft debuted Project Springfield, a cloud-based fuzz testing (aka fuzzing) service that the company has been working on for a quite a while. David Molnar and …