HackerOne employee disclosed vulnerabilities ‘for personal gain’

By Ryan Daws |
4th July 2022 | TechForge Media

Ryan is a senior editor at TechForge Media with over a decade of expertise overlaying the most recent know-how and interviewing main business figures. He can typically be sighted at tech conferences with a powerful espresso in a single hand and a laptop computer within the different. If it is geeky, he’s in all probability into it. Discover him on Twitter: @Gadget_Ry

An worker of HackerOne was caught accessing safety experiences and disclosing vulnerabilities “for private acquire”.

HackerOne is a vulnerability coordination and bug bounty platform that connects companies with penetration testers and cybersecurity researchers.

Following a buyer report of a suspicious vulnerability disclosure made exterior of the HackerOne platform, the corporate determined to launch an investigation.

Jober Abma, Co-Founding father of HackerOne, posted the corporate’s findings:

“We found a then-employee had improperly accessed safety experiences for private acquire. The individual anonymously disclosed this vulnerability data exterior the HackerOne platform with the purpose of claiming extra bounties.

It is a clear violation of our values, our tradition, our insurance policies, and our employment contracts.”

Abma stated the worker in query was recognized in below 24 hours and had their entry to knowledge revoked. The worker was fired and HackerOne says that it’s “bolstered” its defenses to keep away from related conditions sooner or later.

The worker used the deal with ‘rzlr’ so HackerOne asks any entity that’s been contacted utilizing this deal with to succeed in out to [email protected].

(Picture by Travis Essinger on Unsplash)

Need to be taught extra about cybersecurity and the cloud from business leaders? Take a look at Cyber Safety & Cloud Expo going down in Amsterdam, California, and London.

Discover different upcoming enterprise know-how occasions and webinars powered by TechForge right here.

Tags: bug bounty, cyber safety, cybersecurity, hackerone, hacking, infosec