Hacker Accessed Private Reports on HackerOne

By Ionut Arghire for SecurityWeek
Thursday, December 5, 2019

• 2.1k
• More

“It is quite surprising that the security measures, now announced by HackerOne, were not implemented before, given that some of them are of a fundamental and indispensable nature,” Ilia Kolochenko, founder and CEO of web security company ImmuniWeb, commented via email.

“In the near future, attackers will probably consider targeted attacks against crowd security testing platforms. This incident will likely serve as a catalyzer after disclosing how many unprecedented opportunities cybercriminals may get by breaching one single privileged account. It won’t be a trivial task, but the efforts will generously pay off, considering the volume of critical and unpatched vulnerabilities residing on crowd security testing platforms,” Kolochenko concluded. Read Full Article