34 stories tagged bug-bounty, newest first.
160 points by neom | 99 comments
Apple's program page for the Security Research Device, a specially fused iPhone loaned to qualified researchers for iOS security research, with guidelines and application details.
4 points by razorsa | 0 comments
A HackerOne vulnerability report about a SQL injection on an ibm.com subdomain; the page shows a HackerOne sign-in prompt.
204 points by soeckly | 101 comments
A security writeup describing how a self-contained Flask session secret on Google DevSite enabled forged sessions and remote code execution across seven Google domains for a $90,000 bounty.
287 points by luispa | 120 comments
A security researcher's blog post describing a Microsoft internal analytics service flaw where unchecked token signatures allowed admin access to query 17.3 trillion records.
352 points by hipparchus | 181 comments
Blog post by security engineer and bug bounty hunter Joel Margolis examining what has changed at the bug bounty platform HackerOne.
631 points by javxfps | 356 comments
A security researcher's blog post describing a vulnerability that allowed leaking YouTube creators' private videos.
338 points by denysvitali | 82 comments
A blog post on finding and exploiting common misconfigurations in Microsoft IIS web servers, starting from the default IIS splash page.
685 points by secret-noun | 285 comments
Daniel Stenberg blog post announcing the "curl summer of bliss", a pause on accepting vulnerability reports for curl during July 2026.
318 points by tjek | 232 comments
Turso blog post announcing the retirement of its $1,000 bug bounty program for data-corruption bugs, citing effects of AI.
357 points by Tiberium | 129 comments
An X post reporting that public Notion pages expose editors' names, emails, and photos via an unauthenticated POST request, reported in 2022 and still unfixed.
928 points by driesdep | 321 comments
Blog post describing how the author assembled a Tesla Model 3 car computer and touchscreen on a desk from salvaged parts to do bug bounty security research.
844 points by latexr | 537 comments
The curl project's security.txt file, which gives security contact details and warns that people submitting junk vulnerability reports will be banned and publicly ridiculed.
373 points by jnord | 206 comments
Elektroniktidningen news article reporting that the cURL project is ending its bug bounty program.
1080 points by hackermondev | 397 comments
A GitHub Gist writeup by a 16-year-old researcher describing a critical XSS vulnerability in Mintlify docs that affected X, Vercel, Cursor, Discord and others.
590 points by galnagli | 138 comments
Ian Carroll's blog post describing bugs in FIA systems that allowed access to Formula 1 drivers' personal data, including Max Verstappen's passport.
897 points by redbell | 431 comments
A HackerOne vulnerability report page, apparently an AI-generated bug report rejected by maintainers; the content had not loaded when captured.
473 points by alexcos | 253 comments
Chromium issue tracker entry for an ipcz bug letting a compromised renderer duplicate a browser process handle to escape the sandbox, marked fixed.
554 points by brutecat | 174 comments
A security researcher's write-up describing how to bruteforce the phone number linked to any Google account, with a terminal demo of the exploit tool.
320 points by anematode | 92 comments
Blog post describing how the author used AVX512IFMA to speed up Google's kernelCTF proof-of-work and win a $51k exploit submission race.
336 points by indigodaddy | 180 comments
LinkedIn post by curl lead Daniel Stenberg announcing that curl will ban reporters submitting AI-generated security reports, noting none so far have been valid.
627 points by topsycatt | 127 comments
Lupin & Holmes blog post describing how researchers probed Google Gemini's Python code-execution sandbox and extracted parts of its internal source code.
1548 points by brutecat | 439 comments
A security researcher's write-up of a vulnerability chain that exposed the email address of any YouTube channel owner, earning a $10,000 Google bug bounty.
836 points by mooreds | 144 comments
Blog post by Sean Kahler describing how he ethically found a vulnerability enabling takeover of 700 million Electronic Arts accounts.
371 points by vk6 | 72 comments
Blog post describing how the author found CVE-2024-6778 and CVE-2024-5836, Chromium bugs letting a malicious extension escape the sandbox via DevTools, earning a $20,000 bounty.
1542 points by mmsc | 400 comments
A GitHub Gist write-up by a 15-year-old bug hunter describing a Zendesk bug affecting many Fortune 500 companies that earned over $50,000 in bounties.
322 points by stulle123 | 235 comments
A security researcher's writeup of a 1-click exploit chain in KakaoTalk using a deep link, DOM XSS, and Kakao Mail takeover to hijack accounts.
795 points by xrayarx | 164 comments
Sam Curry's blog post on discovering vulnerabilities that allowed hacking millions of ISP modems, and investigating who compromised his own modem.
773 points by albinowax_ | 261 comments
Sam Curry's blog post on investigating a compromise of his own modem and finding vulnerabilities that allowed remote takeover of millions of ISP modems.
379 points by el_duderino | 120 comments
A blog post describing how the author found and exploited a cross-site scripting (XSS) vulnerability on chess.com.
444 points by roblabla | 92 comments
Blog post by John Stawinski describing how his team executed a critical supply chain attack on PyTorch via its GitHub Actions CI infrastructure.
332 points by admp | 72 comments
An interactive tree browser that maps Chrome Vulnerability Reward Program bounty payouts to the Chromium source files changed by the corresponding fixes.
349 points by skilled | 102 comments
A security researcher's write-up on leaking Microsoft account OAuth tokens through an open redirect vulnerability in the Harvest time-tracking app.
397 points by mfrw | 83 comments
Filippo Valsorda's blog post announcing an $8,192 bounty for recovering the original seeds used to generate the NIST elliptic curves.
394 points by jruohonen | 57 comments
A KU Leuven CiTiP blog post discussing Belgium's new legal framework legalising ethical hacking and whether it threatens or helps cybersecurity.