CFOtech UK - Technology news for CFOs & financial decision-makers
United Kingdom

Bug Bounty Stories - Page 2

UK Stories

Bug Bounty stories

Global Stories

Bug Bounty stories

Synack expands CREST pathways with two new certifications
Data Protection

Synack expands CREST pathways with two new certifications

Security buyers get a stronger benchmark as CREST-certified testers gain faster access to Synack's vetted red team for client engagements.

By Sean Mitchell • 4 min read • Wed, 10th Jun 2026
Anthropic expands Project Glasswing to 150 organisations
Application Security

Anthropic expands Project Glasswing to 150 organisations

The wider rollout targets critical infrastructure and software maintainers after early users found more than 10,000 serious flaws.

By Mark Tarre • 4 min read • Tue, 9th Jun 2026
HackerOne launches AI platform to close security gap
Cloud Security

HackerOne launches AI platform to close security gap

Rising vulnerability volumes are outpacing fix times, prompting HackerOne to roll out an AI system that feeds confirmed threats into developer tools.

By Sofiah Nichole Salivio • 4 min read • Wed, 3rd Jun 2026
TrendAI named Gartner endpoint leader for 21st time
Ransomware

TrendAI named Gartner endpoint leader for 21st time

The ranking underscores rising demand for tools that can cover hybrid networks as ransomware and identity attacks increasingly target connected devices.

By Mark Tarre • 4 min read • Thu, 28th May 2026
TrendAI expands bug bounty to cover AI vulnerabilities
Digital Transformation

TrendAI expands bug bounty to cover AI vulnerabilities

The move widens defences for businesses as AI systems become a bigger target for attackers and zero-day flaws multiply across enterprise software.

By Mark Tarre • 3 min read • Wed, 20th May 2026
Synack report says vulnerability testing gap widens
Digital Transformation

Synack report says vulnerability testing gap widens

Enterprises are testing only about 32% of their attack surface, leaving many assets outside regular security checks as threats grow faster.

By Mark Tarre • 4 min read • Sat, 16th May 2026
HackerOne links validated flaws to Wiz cloud platform
Digital Transformation

HackerOne links validated flaws to Wiz cloud platform

Security teams may cut backlogs as validated HackerOne flaws are mapped into Wiz, linking exploit evidence to cloud assets for faster prioritisation.

By Sofiah Nichole Salivio • 4 min read • Fri, 15th May 2026
HackerOne & Wiz link validated findings to cloud risk
Digital Transformation

HackerOne & Wiz link validated findings to cloud risk

Security teams can now rank cloud flaws by exploitability and impact, as validated HackerOne reports feed directly into Wiz's risk graph.

By Sofiah Nichole Salivio • 3 min read • Fri, 15th May 2026
Integrated Quantum launches Kaggle test of VEIL anonymity
Data Protection

Integrated Quantum launches Kaggle test of VEIL anonymity

The public test could bolster or undermine claims that VEIL can anonymise sensitive AI data without letting outsiders recover the original records.

By Sean Mitchell • 4 min read • Fri, 15th May 2026
Microsoft patches 137 flaws, including critical Netlogon
Network Infrastructure

Microsoft patches 137 flaws, including critical Netlogon

Domain controllers face urgent patching after a Netlogon flaw was rated 9.8, with no privileges or user interaction needed for exploitation.

By Joseph Gabriel Lagonsin • 4 min read • Wed, 13th May 2026
AI drives ransomware surge, experts urge faster defence
Malware

AI drives ransomware surge, experts urge faster defence

Experts say AI is accelerating ransomware attacks, shrinking the patching window and forcing organisations to overhaul defences and recovery plans.

By Sofiah Nichole Salivio • 6 min read • Tue, 12th May 2026
Synack launches Sara AI Pentesting for wider coverage
Data Protection

Synack launches Sara AI Pentesting for wider coverage

The move aims to widen security coverage as firms struggle to test expanding attack surfaces quickly enough.

By Joseph Gabriel Lagonsin • 4 min read • Fri, 8th May 2026
PhantomRPC flaw lets attackers reach SYSTEM on Windows
Endpoint Detection and Response

PhantomRPC flaw lets attackers reach SYSTEM on Windows

No patch exists for a Windows RPC weakness that can let attackers turn a service foothold into SYSTEM-level control on a host.

By Sean Mitchell • 5 min read • Wed, 29th Apr 2026
HackerOne launches h1 Validation to verify exploitable flaws
DevOps

HackerOne launches h1 Validation to verify exploitable flaws

Enterprises face a growing backlog as AI tools uncover more flaws, with HackerOne saying 25% still prove exploitable and many are critical.

By Catherine Knowles • 4 min read • Thu, 23rd Apr 2026
HackerOne launches h1 Validation to tackle AI flaws
DevOps

HackerOne launches h1 Validation to tackle AI flaws

Rising AI-generated vulnerability reports are leaving security teams with record backlogs and only hours to judge which flaws hackers can exploit.

By Catherine Knowles • 4 min read • Wed, 22nd Apr 2026

Stories from Other Regions

Bug Bounty stories

Secure.com flags 21 flaws in AI pentest on live stacks
Network Security

Secure.com flags 21 flaws in AI pentest on live stacks

Seven critical weaknesses were found in live production systems over a weekend, showing AI-driven pentests can now uncover basic flaws cheaply.

By Mark Tarre • 5 min read • Fri, 1st May 2026
Miggo launches Pulse in bid to speed AI exploit response
Firewalls

Miggo launches Pulse in bid to speed AI exploit response

It aims to cut the time security teams need to spot exploitable flaws and deploy temporary defences before attackers strike.

By Shannon Williams • 4 min read • Thu, 30th Apr 2026