SecurityGoogle Pauses OSS Bug Bounty Submissions
Google has temporarily stopped accepting product vulnerability reports for its OSS VRP, citing a surge in automated, mostly invalid submissions.
> Search
7 results for “bug bounty”
Security
SecurityTeen's Auth Flaw Opened Titan's Data Vault
A 16-year-old researcher bypassed Microsoft's Titan analytics by exploiting an unverified JWT and was paid a $5,000 bounty.
SecurityChrome 154 Fixes 108 Flaws, 11 Critical
Google's latest stable release patches a wide swath of memory-safety bugs, but most bug bounty payouts remain undecided.
SecurityAI-Crafted Exploit Chain Hit OpenAI Code
Researchers chained an ImageMagick flaw with an OpenAI sign-in issue to reach internal code, earning a bounty.
Cyber Crimenpm stealer tied to bounty hunter
CrowdStrike says a claimed bug bounty hunter likely built the PhantomRaven npm stealer with an LLM, active since November 2022.
SecurityThe Validation Gap in AI Security
AI can accelerate vulnerability discovery, but the core of offensive security remains the ability to verify technical reality.
SecurityRedmond Patches RoguePlanet Zero-Day Amidst Ongoing Researcher Conflict
Microsoft has addressed the RoguePlanet vulnerability, ending a contentious saga with security researcher Nightmare Eclipse.