CFOtech UK - Technology news for CFOs & financial decision-makers
United Kingdom

Bug Bounty Stories

UK Stories

Bug Bounty stories

Global Stories

Bug Bounty stories

Google adds security controls for AI agents in Chrome
Software-as-a-Service

Google adds security controls for AI agents in Chrome

Browser-based AI agents will face tighter enterprise oversight as Google moves to curb data leaks and unauthorised actions in Chrome.

By Mark Tarre • 4 min read • Last week
EU AI Act deadline exposes growing agentic security risks
Data Protection

EU AI Act deadline exposes growing agentic security risks

Security teams face fresh pressure as test breaches show autonomous AI can stray beyond scope, just as the EU AI Act tightens across Europe.

By Sofiah Nichole Salivio • 6 min read • Last week
HackerOne launches H1 Remediation for faster fixes
Digital Transformation

HackerOne launches H1 Remediation for faster fixes

Critical vulnerability backlogs have swelled 29-fold, prompting a tool that sends fix plans into engineering systems and AI coding tools.

By Sofiah Nichole Salivio • 5 min read • Last month
ASC-IT launches Darkmoon for private AI pentesting
Data Protection

ASC-IT launches Darkmoon for private AI pentesting

The platform lets security teams run AI pentests without exposing customer infrastructure data to external models.

By Joseph Gabriel Lagonsin • 4 min read • Last month
AI moves from hype to targeted frontline & finance use
Digital Transformation

AI moves from hype to targeted frontline & finance use

Businesses are narrowing AI deployments to specific tasks as scrutiny grows over costs, returns and the need for human judgement.

By Sofiah Nichole Salivio • 7 min read • Last month
Businesses urged to rethink young workers entry paths
Manufacturing

Businesses urged to rethink young workers entry paths

Employers risk worsening shortages in cybersecurity and frontline roles unless they open new entry routes and training for young workers.

By Mark Tarre • 7 min read • Last month
Microsoft patches 622 flaws, including SharePoint bugs
Network Security

Microsoft patches 622 flaws, including SharePoint bugs

Defenders face added pressure as the update covers two actively exploited flaws and a SharePoint bug that could enable remote code execution.

By Mark Tarre • 4 min read • Last month
HackerOne joins Anthropic cyber defence AI programme
Software-as-a-Service

HackerOne joins Anthropic cyber defence AI programme

The controlled trial could help security teams cut false positives and speed remediation as frontier AI moves beyond finding bugs to validating risk.

By Sofiah Nichole Salivio • 4 min read • Last month
Anthropic widens Fable 5 safeguards & rates jailbreaks
Malware

Anthropic widens Fable 5 safeguards & rates jailbreaks

New safeguards will let Fable 5 block more harmful cyber prompts, as Anthropic also seeks a common scale for jailbreak risk.

By Sean Mitchell • 4 min read • Last month
Linux Foundation launches Akrites to fix open source flaws
Security Operations Centres

Linux Foundation launches Akrites to fix open source flaws

Backed by Amazon, Google and Microsoft, the scheme aims to speed fixes for flaws that could ripple through banks, hospitals and power grids.

By Joseph Gabriel Lagonsin • 5 min read • Fri, 26th Jun 2026
OpenAI expands Daybreak with patching tools & partners
Network Security

OpenAI expands Daybreak with patching tools & partners

The move aims to help defenders turn faster vulnerability discovery into working fixes, as OpenAI broadens access to its cyber tools and partners.

By Sean Mitchell • 5 min read • Tue, 23rd Jun 2026
Patchstack & GoDaddy add WordPress vulnerability detection
Security Operations Centres

Patchstack & GoDaddy add WordPress vulnerability detection

Eligible Managed WordPress customers gain visibility into flaws as they are disclosed, as WordPress attacks are being exploited within hours.

By Sean Mitchell • 4 min read • Thu, 18th Jun 2026
Anthropic launches Claude Fable 5 with safety limits
AI Security

Anthropic launches Claude Fable 5 with safety limits

Many harmless prompts will now be diverted to Claude Opus 4.8 as Anthropic tightens safeguards around its newest general-use model.

By Mark Tarre • 5 min read • Thu, 11th Jun 2026
Synack expands CREST pathways with two new certifications
Data Protection

Synack expands CREST pathways with two new certifications

Security buyers get a stronger benchmark as CREST-certified testers gain faster access to Synack's vetted red team for client engagements.

By Sean Mitchell • 4 min read • Wed, 10th Jun 2026
Anthropic expands Project Glasswing to 150 organisations
Application Security

Anthropic expands Project Glasswing to 150 organisations

The wider rollout targets critical infrastructure and software maintainers after early users found more than 10,000 serious flaws.

By Mark Tarre • 4 min read • Tue, 9th Jun 2026
HackerOne launches AI platform to close security gap
Cloud Security

HackerOne launches AI platform to close security gap

Rising vulnerability volumes are outpacing fix times, prompting HackerOne to roll out an AI system that feeds confirmed threats into developer tools.

By Sofiah Nichole Salivio • 4 min read • Wed, 3rd Jun 2026

Stories from Other Regions

Bug Bounty stories

Agoda launches public bug bounty with USD $6,000 reward
Data Protection

Agoda launches public bug bounty with USD $6,000 reward

Researchers can now earn up to USD $6,000 for exposing flaws in Agoda's core web services, APIs and mobile app via HackerOne.

By Sean Mitchell • 4 min read • Thu, 25th Jun 2026