U.S. Air Force Announces Third Bug Bounty Program

ronjor · Nov 6, 2018

By Eduard Kovacs on November 06, 2018

The United States Air Force on Monday announced that it has launched its third bug bounty program in collaboration with HackerOne.

Hack the Air Force 3.0 is the largest bug bounty program run by the U.S. government to date, spanning 191 countries and lasting more than four weeks.
Click to expand...

guest · Dec 20, 2018

'Hack the Air Force' bug hunting challenge uncovers 120 flaws in websites and services
December 20, 2018
https://www.zdnet.com/article/hack-...-uncovers-120-flaws-in-websites-and-services/

Nearly 30 participating hackers submitted over 120 valid vulnerabilities throughout the month-long programme, and the US Air Force awarded them over $130,000 for their efforts.

"It's critical to allow these researchers to uncover vulnerabilities in Air Force websites and systems, which ultimately strengthens our cybersecurity posture and decreases our vulnerability surface area," explained Capt James "JT" Thomas, Air Force Digital Service.
Click to expand...

guest · Aug 7, 2019

The Air Force sends good guys in to hack its cloud
August 6, 2019
https://www.fifthdomain.com/dod/air...r-force-sends-good-guys-in-to-hack-its-cloud/

The Air Force invited ethical hackers into its IT networks again this spring, allowing good guys the chance to infiltrate its enterprise-wide Air Force Common Computing Environment in search of vulnerabilities, the white hat hacking company Bugcrowd announced Aug. 6.

The bug bounty program, done in a partnership with Bugcrowd and the Air Force’s CCE program office, found 54 vulnerabilities. Bug bounties work under the assumption that the customer, in this case the Air Force, will now close the loopholes the hackers found, making the system more secure.
The CCE cloud uses Amazon Web Services and Microsoft’s Azure commercial cloud. The service plans to migrate more than 100 applications to that cloud environment, Bugcrowd executives said.

The largest payout from the bug bounty totaled $20,000. The event ran from March 18 to June 21 at Hanscom Air Force Base in Massachusetts.
Click to expand...

Dark Reading: US Air Force Bug Bounty Program Nets 54 Flaws for $123,000

The bug bounty program, in which 50 vetted hackers participated, resulted in $123,000 in prizes, or an average of $2,460 per participant.

While the US Air Force's bug bounty program seems impressive, the rewards from such programs tend to benefit relatively few people. Because there were 50 researchers, the average researcher only saw a single reward. In reality, the majority of the prizes likely went to a handful of researchers.
Click to expand...

guest · Apr 15, 2020

Ethical hackers find hundreds of vulnerabilities during latest Air Force bug bounty
April 15, 2020
https://www.fifthdomain.com/2020/04...abilities-during-latest-air-force-bug-bounty/

Ethical hackers found more than 460 vulnerabilities in an Air Force platform during the most recent iteration of the “Hack the Air Force” program, according to a April 15 news release from security research company HackerOne.

Through “Hack the Air Force 4.0,” which ran from Oct. 23 to Nov. 20, 60 security researchers searched for vulnerabilities in an Air Force virtual data center. They ultimately earned a total of $290,000, the highest total given out through its bug bounty program so far.
The event “gave hackers the opportunity to collaborate with peers and military personnel to discover vulnerabilities," according to HackerOne.

Through the four ethical hacking events, the Air Force has awarded a total of about $654,000 in rewards to ethical hackers for discovering 893 vulnerabilities.
Click to expand...

Log in or Sign up

U.S. Air Force Announces Third Bug Bounty Program

ronjor Global Moderator

guest Guest

guest Guest

guest Guest

Log in or Sign up

U.S. Air Force Announces Third Bug Bounty Program

ronjor Global Moderator

guest Guest

guest Guest

guest Guest

Useful Searches