Tag Archive for: ethical

Ethical hackers discovered 65,000 software vulnerabilities this year

/in


Check out all the on-demand sessions from the Intelligent Security Summit here.

Vulnerabilities are everywhere. Every device, application and API presents new entry points for attackers to exploit and gain access to privileged information. However, more and more organizations are turning to ethical hackers to help keep up with potential exploits.

In fact, according to HackerOne’s 2022 Hacker-Powered Security Report released today, ethical hackers discovered more than 65,000 software vulnerabilities in 2022, an increase of 21% since 2021. 

The report found that digital transformation projects had helped contribute to an increase in misconfigurations by 150% and improper authorization by 45%. 

At a high level, the research shows that ethical hacker communities have the capacity to identify vulnerabilities at scale, while highlighting that in-house security teams can’t afford to rely on traditional manual approaches to vulnerability management. 

Event

Intelligent Security Summit On-Demand

Learn the critical role of AI & ML in cybersecurity and industry specific case studies. Watch on-demand sessions today.


Watch Here

Scaling vulnerability management with ethical hackers  

The research comes as more and more organizations are feeling the pressure of managing an ever-growing number of exploits, with 66% of security leaders reporting a backlog of over 100,000 vulnerabilities, and 54% saying they’re able to patch less than 50% of vulnerabilities in their backlog. 

This high volume of vulnerabilities has created the need for a more scalable approach to managing vulnerabilities, which ethical hacking and bug bounty vendors like HackerOne are providing. 

“Insights from the hacking community about their experience and expectations teach organizations how to run a best-in-class program that will attract the top hackers,” said HackerOne’s CISO and chief hacking officer, Chris Evans. 

“HackerOne’s vulnerability data, sourced from our 3,000 customer programs, shows organizations which…

Source…

CyberTechie introducing an ethical hacker hiring platform

/in


Hackers have gotten a bad rep – but they are crucial in today’s landscape due to the amount of cybercrime that goes on. How do they help curb data leaks and enhance cybersecurity? Ethical hackers are the answer, but it can be hard to screen hackers because it’s a relatively grey industry, that’s why CyberTechie comes in. The company has established themselves as the best platform for hiring ethical hackers. 

The company has managed to revamp the hacker hiring industry by regulating who they allow onto their platform so that clients do not have to go through that tedious process of vetting potential ethical hackers themselves.

Ethical hacking is the process of legally acquiring unauthorised access to a network, database, or software program. To protect, reform, or modify a digital network, it is acceptable to bypass the security measures of individual digital devices.

Ethical hacking is simulating the actions and strategies of malicious people who have breached a computer system. This identifies weak points in the company’s security infrastructure and allows for the development of countermeasures to stop future attacks.

White hat hackers, or ethical hackers, are highly trained professionals who know how to circumvent security systems without compromising them. The firm would not be as secure online without their efforts. If they obtain the green light from the company’s “upper-ups,” they fight against malicious hackers by stopping cyber-attacks.

Ethical hackers, also referred to as “white hats,” are security professionals who carry out these evaluations.

“The digital world is warming up to the idea of ‘white hat’ roles in the digital space, we’ve got white hat seo agencies, white hat hackers, and on the flip side, we have grey hat and black hats that provide questionable services. While they might have results, how they get those results may cause more harm than good, so we’re in a position to create a network that…

Source…

Detectify secures $10M more to expand its ethical hacking platform • TechCrunch

/in


Detectify, a security platform that employs ethical hackers to conduct attacks designed to highlight vulnerabilities in corporate systems, today announced that it raised $10 million in follow-on funding led by Insight Partners. CEO Richard Carlsson says that the new cash, which brings Detectify’s total raised to $42 million, will be put toward product development and improving the overall user experience.

Detectify was founded by four ethical hackers from Stockholm, including Carlsson, who realized the business potential in combining security research with automation. In an interview with TechCrunch, Carlsson pointed out that product development workflows have changed dramatically over the past few years, with new teams within organizations spinning up internet-facing apps and adding potentially vulnerable assets to their employer’s environment. The trend toward low- and no-code tools has lowered the app development barrier to entry, but it’s also made the jobs of security specialists that much harder.

Illustrating the challenges, a recent Dark Reading survey found that 26% of IT and security experts don’t trust the platforms used to create low- and no-code apps. Roughly as many — 25% — said that they don’t even know which apps within their companies are being created by these tools.

“While companies should integrate security best practices earlier in their development cycle and try to catch vulnerabilities in development, production is what truly matters,” Carlsson added via email. “Unless you have a completely linear development process, which no company actually has, you will never catch everything. And this legacy mindset and over-reliance on ‘shifting left’ instills a sense of false confidence in organizations that actually increases their risk level.”

Detectify

Image Credits: Detectify

Detectify’s approach crowdsources real payloads — pieces of code that execute when a hacker exploits a vulnerability — from a private community of ethical hackers and uses these contributions for payload-based tests. Carlsson claims that Detectify tests customers’ entire attack surfaces, exposing how malicious attackers might exploit…

Source…