Last fall, Jakub Ciolek reported two denial-of-service bugs in Argo CD, a popular Kubernetes controller, via HackerOne's Internet Bug Bounty (IBB) program. Both were assigned CVEs and have since been ...

The developer of the popular curl command-line utility and library announced that the project will end its HackerOne security bug bounty program at the end of this month, after being overwhelmed by ...

A recent decision by HackerOne to suspend new vulnerability submissions to its crowdsourced Internet Bug Bounty (IBB) program has spotlighted the growing remediation challenges across the industry, ...

Researchers who identify and report bugs in open-source software will no longer be rewarded by the Internet Bug Bounty team. HackerOne, which administers the program, has said that it is “pausing ...

Curl ends HackerOne bug bounty due to fake and AI-generated vulnerability reports Developers say incentives led to abuse, overwhelming the security team with invalid submissions From February 2026, ...

Will AI kill the bug bounty industry? Anthropic's Mythos is accelerating vulnerability discovery and forcing researchers and ...

Software providers continue to rely on community support to help them identify code mistakes that can lead to malicious attacks. Bug bounty programs remain a crucial component of cybersecurity ...

Cryptocurrency exchange Crypto.com has launched a landmark bug bounty program with HackerOne. The program will provide up to $2m in rewards for the reporting of security vulnerabilities. This ...

Researchers who identify and report bugs in open-source software will no longer be rewarded by the Internet Bug Bounty team. HackerOne, which administers the program, has said that it is “pausing ...