Army Launches bug bounty program Hack the Army 3.0 to Strengthen Cybersecurity

guest · Nov 12, 2020

Army Launches Hack the Army 3.0 to Strengthen Cybersecurity
November 12, 2020
https://www.meritalk.com/articles/army-launches-hack-the-army-3-0-to-strengthen-cybersecurity/

The U.S. Army has launched Hack the Army 3.0, a bug bounty program that is intended to help safeguard the Department of Defense (DoD) and Army networks, systems and data.

The initiative is a collaboration between U.S. Army Cyber Command (ARCYBER), Defense Digital Service (DDS), and the Army Network Enterprise Technology Command.
For the third iteration of Hack the Army, the active hacking phase will begin Dec. 14 and run through Jan. 28, 2021, or until funds are exhausted.
Click to expand...

In a press release, the Army said ARCYBER officials are hoping to increase participation by military members, and are looking at ways to conduct more frequent bug bounty programs in the future. While the Army hasn’t released the total budget for the program, it did confirm that civilian hackers who discover and successfully report vulnerabilities are eligible to earn cash rewards.

The Army said that Hack the Army 3.0 will offer a dozen explicit domain targets of specific Army interest, as well as sign-on/authentication services and Army-owned VPNs. During the third iteration the entire *.army.mil domain can be targeted by participants as well, but rewards will be paid only for discovering certain categories of vulnerabilities.
Click to expand...

Army Cyber Command: Hack The Army 3.0 furthers innovative bug bounty program to defend networks, data

The first iteration of Hack The Army attracted 371 “white hat” hackers – including 25 government employees, of which 17 were uniformed military personnel -- to a two-month challenge. The event produced 416 reports that yielded 118 valid vulnerabilities, and civilian hackers were awarded about $100,000 for their discoveries.

That success was followed by Hack The Army 2.0 in late 2019, during which 52 hackers from six countries found 146 valid vulnerabilities on publicly accessible Army websites in just over a month and civilian hackers earned a total of $275,000.
Click to expand...

Hack The Army 3.0 is set to begin.
Once again the HackerOne vulnerability coordination and bug bounty platform will facilitate the program. U.S. military and government civilian personnel interested in participating can get information and apply at https://www.hackerone.com/dds-apply.
Click to expand...

guest · Dec 29, 2020

Third edition of US Army bug bounty program prepared for deployment
Hack the Army 3.0 promises ‘more targets, bounties, and hackers’
December 29, 2020
https://portswigger.net/daily-swig/...my-bug-bounty-program-prepared-for-deployment

The delayed third edition of the US Department of Defense’s ‘Hack the Army’ bug bounty program is due to take place next month.

Hack the Army 3.0 – a collaboration between the US Army Cyber Command, Defense Digital Service, and vulnerability disclosure platform HackerOne – is scheduled to run from January 6 until February 17, 2021, or until funds are exhausted.
The invite-only exercise will see both military and civilian participants invited to look for security flaws in a dozen explicit domain targets of specific military interest, as well as authentication services and army-owned virtual private networks (VPNs).
Click to expand...

‘More targets, bounties, and hackers’
Hack the Army 3.0 follows two previous editions of the exercise in 2017 and 2019. The exercise was initially due to begin in December.

“Each year, Hack the Army grows in attendance and vulnerability reports,” the HackerOne spokesperson added.
“Cybersecurity needs to constantly evolve, and by leveraging the hacking community the Army is taking new and innovative steps to remain secure.”
Click to expand...

guest · Jan 6, 2021

Defense Digital Service Kicks Off Third ‘Hack the Army’ Bug Bounty Challenge with HackerOne
January 6, 2021
https://www.businesswire.com/news/home/20210106005217/en/

SAN FRANCISCO--(BUSINESS WIRE)--The Defense Digital Service (DDS) and HackerOne today announced the launch of DDS’s eleventh bug bounty program with HackerOne and the third with the U.S. Department of the Army. Hack the Army 3.0 is a time-bound, hacker-powered security test aimed at surfacing vulnerabilities so they can be resolved before they are exploited by adversaries. The bug bounty program is open to both military and civilian participants and will run from January 6, 2021 through February 17, 2021.

Bug bounty programs, like Hack the Army 3.0, incentivize security research and reporting of real-world security vulnerabilities in exchange for monetary rewards for qualified vulnerabilities and participants. These programs are an industry best practice leveraged by the most mature organizations across the world.

By disclosing vulnerabilities to security teams, civilian and military hackers will help the U.S. Army secure digital assets and defend against cyberattacks.
Click to expand...

Log in or Sign up

Army Launches bug bounty program Hack the Army 3.0 to Strengthen Cybersecurity

guest Guest

guest Guest

guest Guest

Log in or Sign up

Army Launches bug bounty program Hack the Army 3.0 to Strengthen Cybersecurity

guest Guest

guest Guest

guest Guest

Useful Searches