January 29, 2020

Let’s make ransomware MORE illegal, says Maryland

… with a clumsily worded proposed bill that wouldn't protect researchers.

Naked Security

January 09, 2020

Google’s Project Zero highlights patch quality with policy tweak

Google's Project Zero bug-hunting team has tweaked its 90-day responsible disclosure policy to help improve the quality and adoption of vendor patches.

Naked Security

December 09, 2019

HackerOne pays $20,000 bounty after breach of own systems

In an embarrassing twist, bug bounty platform HackerOne has paid a $20,000 reward to a researcher who reported a security flaw inadvertently caused by one of its staff during… a bug submission.

Naked Security

December 02, 2019

Uncle Sam opens arms to friendly hackers

All you bug hunters out there are about to get a nice Christmas gift - the US federal government finally wants to hear from you.

Naked Security

November 15, 2019

How the Linux kernel balances the risks of public bug disclosure

A serious Wi-Fi flaw shows how Linux handles security in plain sight.

Naked Security

February 14, 2019

Google paid out $3.4m in bug bounties last year

317 researchers from 78 countries turned 2018 into a worldwide bug-crunching spree.

Naked Security

December 12, 2018

Google+ to power down early after second security hole found

Google has disclosed the second security hole in its Google+ social network in three months.

Naked Security

November 23, 2018

Hacker says USPS ignored serious security flaw for over a year

A security researcher claims the US Postal Service ignored a security flaw affecting 60 million users, until it was contacted by a journalist.

Naked Security

August 13, 2018

How a cryptocurrency-destroying bug almost didn’t get reported

A researcher recently revealed how he found a bug that could have brought the fourth largest cryptocurrency to its knees – and how he was almost unable to report it.

Naked Security