Do Son The cURL vulnerability reporting policy now routes low and medium severity bugs to public GitHub issues to alleviate maintainer triage burdens.
HackerOne
Discover how the new GitHub bug bounty program impacts researchers. The platform replaces floating ranges with fixed payouts and a lucrative VIP tier.
curl will halt vulnerability reports throughout July 2026, dubbing it a "summer of bliss," and will delay its 8.22.0 release by two weeks.
ClickUp discloses a configuration flaw exposing 893 emails and a live API token via Split.io feature flags. Learn how client-side SDKs became a public leak.
13M Adobe tickets leaked! Mr. Raccoon bypassed elite defenses by targeting a BPO partner in India. See how the "human element" cracked the supply chain.
The cURL project's bug bounty program is overwhelmed by AI-generated, fraudulent vulnerability submissions, leading the lead developer to consider its discontinuation.
Learn about Crypto.com's upgraded bug bounty program, offering a record-breaking $2 million reward pool for identifying potential vulnerabilities.
In summation, the HackerOne report underscores the profound influence of ethical hackers on the cybersecurity domain