HackerOne published its Hacker-Powered Security Report

guest · Sep 22, 2020

HackerOne Paid Out Over $107 Million in Bug Bounties
September 22, 2020
https://www.securityweek.com/hackerone-paid-out-over-107-million-bug-bounties

Hacker-powered bug hunting platform HackerOne on Tuesday announced that it paid more than $44.75 million in bounty rewards over the past 12 months, with the total payouts to date surpassing $107 million.
Click to expand...

Based in San Francisco, the company started paying hackers in October 2013, and has received reports for over 181,000 valid vulnerabilities to date. Last year alone, the platform says 37,259 vulnerability reports were resolved.

HackerOne says it currently has more than 830,000 registered vulnerability hunters from 226 countries and territories, and that nine of them have earned more than $1 million on the platform.
Signups went up 59% as result of the global coronavirus crisis, while the number of submitted bug reports went up 28%.
Click to expand...

HackerOne also reports an increase in government bug bounty programs, following the launch of the first such program by the U.S. Department of Defense’s (DoD) Defense Digital Service (DDS) in 2016. Such programs are now running in the European Union, the U.K., and Singapore.

The platform encourages all organizations to implement a Vulnerability Disclosure Policy (VDP) to ensure they can receive information on security flaws and improve their overall security posture.

“[...] Without it, those vulnerabilities remain unknown, unfixed, and potentially unleashed to people outside your organization, exposing your business and your brand to unnecessary risk or disastrous consequences,” HackerOne notes.
Click to expand...

guest · Sep 22, 2020

HackerOne Research Finds Hackers Discover A Software Vulnerability Every 2.5 Minutes
September 22, 2020
https://www.hackerone.com/press-rel...cover-software-vulnerability-every-25-minutes

Fourth annual report reveals more businesses are turning to hackers to find gaps in cyber defenses amid growing COVID-19 cyberthreats and stretched IT teams
Research by HackerOne, the world’s most trusted hacker-powered security platform, has revealed hackers are finding over twice as many vulnerabilities in software in 2020 than they were in 2019. Hackers have helped find and resolve over 180,000 vulnerabilities on the HackerOne platform, with one third of those being reported in the past year alone as more and more businesses turn to hackers to help secure their systems.
Click to expand...

The research also revealed that IT and security teams are more concerned about the impact of attacks, with 64% believing organizations were under more threat during the pandemic. At the same time, 30% of in-house security teams were reduced and a quarter had budget cuts since March.

“Adding to that, the need to develop new COVID-proof solutions means fresh vulnerabilities are inevitable. Traditional security tactics are no longer sufficient to keep up with a rapidly adapting attack surface. New, affordable and agile solutions need to be found.”
Additional key findings in the report included: [...]
Click to expand...

HackerOne: The 4th Annual Hacker Powered Security Report

REPORT HIGHLIGHTS

Learn how the security community is responding to COVID-19

Discover how security leaders are changing their strategies to keep pace with continuous development

Get insight into vulnerability trends across the world

Click to expand...

Log in or Sign up

HackerOne published its Hacker-Powered Security Report

guest Guest

guest Guest

Log in or Sign up

HackerOne published its Hacker-Powered Security Report

guest Guest

guest Guest

Useful Searches