Page 38 - Bug Bounty News Today : Breaking News, Live Updates & Top Stories | Vimarsana

By Ionut Arghire on May 05, 2021 The United States Department of Defense this week announced an expansion of the scope of its vulnerability disclosure program to include all of its publicly accessible information systems. The program has been running on HackerOne since 2016 when the DOD’s Hack the Pentagon initiative was launched and provides security researchers with means to engage with the DOD when they identify vulnerabilities in the department’s public-facing websites and applications. As part of the expanded scope, vulnerability hunters can probe all of DOD’s publicly-accessible...

Article content Toronto, Ontario, April 07, 2021 (GLOBE NEWSWIRE) — LifeLabs Medical Laboratory, Canada’s leading provider of laboratory diagnostic information and digital health connectivity systems, today announced the launch of their Vulnerability Disclosure Program (VDP) with Bugcrowd, the industry leading crowdsourced cybersecurity platform. This VDP program will work to further strengthen cybercrime detection technology across LifeLabs’ online tools, apps and solutions in alignment with the cyber security research community. By partnering with Bugcrowd, LifeLabs will streamline th...

6 April 2021 The program will provide Parrot with an ongoing analysis of the security of its products in addition to the various security audits already carried out. Paris, France, 6th of April 2021 – Parrot, the leading European drone group, is launching its Bug Bounty program with YesWeHack, the first European crowdsourced security platform. Through this partnership, Parrot benefits from YesWeHack’s vast community of cybersecurity researchers to identify potential vulnerabilities in its drones, mobile applications and WebServices. The Bug Bounty program will take place in two phases:...

Parrot Launches Bug Bounty Program European drone manufacturer Parrot has partnered with crowdsourced security platform YesWeHack to launch a Bug Bounty program. By setting up the two-phase program, Parrot hopes that potential vulnerabilities in its drones, mobile applications, and web services will be identified by YesWeHack's community of more than 22,000 cybersecurity researchers. "After the integration of cybersecurity from the initial design phase of Parrot drones, the Bug Bounty launched with YesWeHack completes the audits and brings an additional step of control," said Victor Vuil...

Zero-Click Zip TL;DR I found a zero click vulnerability in Apple Mail, which allowed me to add or modify any arbitrary file inside Mail’s sandbox environment. This could lead to many bad things including unauthorized disclosure of sensitive information to a third party. An attacker can modify victim’s Mail configuration including mail redirects which enables takeover of victim’s other accounts via password resets. This vulnerability can be used to change the victim’s configuration so that victims will be propagating the attack to their correspondents in a worm-like fashion...