Top tier penetration testers are a breed of their own. Here is how to make sure your pentester is topnotch.

HackerOne’s 2018 Hacker-Powered Security Report showed that the average award for critical vulnerabilities has increased.

The thief also had a second dataset, including the M1 Abrams maintenance manual, a tank platoon training course, a crew survival course and documentation on improvised explosive device (IED) mitigation tactics.

More companies are looking to adopt “safe harbor” language in their bug bounty programs to build trust with participants.

The two teens used the rewards points built up in the accounts to make purchases, before selling the account credentials on the Dark Web.

It’s the latest example of the hackability of off-the-shelf IoT devices – even when default passwords are changed.

Two Canadian banks reported that they may be targets of a hack after fraudsters claimed that they electronically accessed personal and account information.

The use of automated bots is becoming more prevalent for novice attackers as tools become more available, researchers found.

The Department of Justice has announced charges against nine Iranians, affiliated with the Mabna Institute, who are accused of stealing private data from U.S. universities, private companies, and U.S. government departments.

Researchers highlight a privately held traffic distribution system tool for malware called BlackTDS that lowers the bar to entry for threat actors.