Tesla scope update on Bugcrowd: +11 in-scope.
Currently $100K ceiling.
https://bountyhunte.rs/programs/bugcrowd-tesla
Currently $100K ceiling.
https://bountyhunte.rs/programs/bugcrowd-tesla
Tesla
Bugcrowd · scope change
bountyhunte.rs
September 24, 2026 at 12:00 AM
Tesla scope update on Bugcrowd: +11 in-scope.
Currently $100K ceiling.
https://bountyhunte.rs/programs/bugcrowd-tesla
Currently $100K ceiling.
https://bountyhunte.rs/programs/bugcrowd-tesla
🥉 BUGCROWD IS IN THE BUILDING! We are PROUD to have Bugcrowd as a Bronze Sponsor for BSides Philly 2026! Support from valued partners like you means the world to our community, and we couldn't do this without you! Thank you for helping bring this year's event to life!
🔗 More: bsidesphilly.org
🔗 More: bsidesphilly.org
September 23, 2026 at 2:01 PM
🥉 BUGCROWD IS IN THE BUILDING! We are PROUD to have Bugcrowd as a Bronze Sponsor for BSides Philly 2026! Support from valued partners like you means the world to our community, and we couldn't do this without you! Thank you for helping bring this year's event to life!
🔗 More: bsidesphilly.org
🔗 More: bsidesphilly.org
New on Bugcrowd: VR Public Managed Bug Bounty Engagement bug bounty.
$5K ceiling.
https://bountyhunte.rs/programs/bugcrowd-vr-group-mbb-og1
$5K ceiling.
https://bountyhunte.rs/programs/bugcrowd-vr-group-mbb-og1
VR Public Managed Bug Bounty Engagement
VR Public Managed Bug Bounty Engagement on Bugcrowd · $5K ceiling
bountyhunte.rs
September 23, 2026 at 10:00 AM
New on Bugcrowd: VR Public Managed Bug Bounty Engagement bug bounty.
$5K ceiling.
https://bountyhunte.rs/programs/bugcrowd-vr-group-mbb-og1
$5K ceiling.
https://bountyhunte.rs/programs/bugcrowd-vr-group-mbb-og1
Electroneum Smart Chain (ETN-SC) — EVM-Compatible Blockchain scope update on Bugcrowd: +3 in-scope.
Currently $12K ceiling.
https://bountyhunte.rs/programs/bugcrowd-smartchain-mbb-og
Currently $12K ceiling.
https://bountyhunte.rs/programs/bugcrowd-smartchain-mbb-og
Electroneum Smart Chain (ETN-SC) — EVM-Compatible Blockchain
Bugcrowd · scope change
bountyhunte.rs
September 23, 2026 at 1:00 AM
Electroneum Smart Chain (ETN-SC) — EVM-Compatible Blockchain scope update on Bugcrowd: +3 in-scope.
Currently $12K ceiling.
https://bountyhunte.rs/programs/bugcrowd-smartchain-mbb-og
Currently $12K ceiling.
https://bountyhunte.rs/programs/bugcrowd-smartchain-mbb-og
Binance scope update on Bugcrowd: +20 in-scope.
Currently $10K ceiling.
https://bountyhunte.rs/programs/bugcrowd-binance
Currently $10K ceiling.
https://bountyhunte.rs/programs/bugcrowd-binance
Binance
Bugcrowd · scope change
bountyhunte.rs
September 22, 2026 at 7:01 PM
Binance scope update on Bugcrowd: +20 in-scope.
Currently $10K ceiling.
https://bountyhunte.rs/programs/bugcrowd-binance
Currently $10K ceiling.
https://bountyhunte.rs/programs/bugcrowd-binance
Binance scope update on Bugcrowd: +20 in-scope.
Currently $10K ceiling.
https://bountyhunte.rs/programs/bugcrowd-binance
Currently $10K ceiling.
https://bountyhunte.rs/programs/bugcrowd-binance
Binance
Bugcrowd · scope change
bountyhunte.rs
September 22, 2026 at 4:00 AM
Binance scope update on Bugcrowd: +20 in-scope.
Currently $10K ceiling.
https://bountyhunte.rs/programs/bugcrowd-binance
Currently $10K ceiling.
https://bountyhunte.rs/programs/bugcrowd-binance
Tesla scope update on Bugcrowd: +11 in-scope.
Currently $100K ceiling.
https://bountyhunte.rs/programs/bugcrowd-tesla
Currently $100K ceiling.
https://bountyhunte.rs/programs/bugcrowd-tesla
Tesla
Bugcrowd · scope change
bountyhunte.rs
September 22, 2026 at 3:00 AM
Tesla scope update on Bugcrowd: +11 in-scope.
Currently $100K ceiling.
https://bountyhunte.rs/programs/bugcrowd-tesla
Currently $100K ceiling.
https://bountyhunte.rs/programs/bugcrowd-tesla
Tesla scope update on Bugcrowd: +11 in-scope.
Currently $100K ceiling.
https://bountyhunte.rs/programs/bugcrowd-tesla
Currently $100K ceiling.
https://bountyhunte.rs/programs/bugcrowd-tesla
Tesla
Bugcrowd · scope change
bountyhunte.rs
September 22, 2026 at 1:00 AM
Tesla scope update on Bugcrowd: +11 in-scope.
Currently $100K ceiling.
https://bountyhunte.rs/programs/bugcrowd-tesla
Currently $100K ceiling.
https://bountyhunte.rs/programs/bugcrowd-tesla
Claude Opus 5 used to hack the OpenAI repository
It's not often that an AI giant's flagship model helps security professionals break into a rival company's front door. In a legitimate bug bounty audit, a three-person research team at startup Hacktron AI used Anthropic's Claude to link two critical…
It's not often that an AI giant's flagship model helps security professionals break into a rival company's front door. In a legitimate bug bounty audit, a three-person research team at startup Hacktron AI used Anthropic's Claude to link two critical…
Claude Opus 5 used to hack the OpenAI repository
It's not often that an AI giant's flagship model helps security professionals break into a rival company's front door. In a legitimate bug bounty audit, a three-person research team at startup Hacktron AI used Anthropic's Claude to link two critical vulnerabilities, gain access to an OpenAI employee's account and access an internal software repository. Researchers Harsh Jaiswal, Mohan Pedhapati, and Rahul Maini are participating in OpenAI's Bugcrowd project.
nanobyte.site
September 18, 2026 at 5:18 PM
Claude Opus 5 used to hack the OpenAI repository
It's not often that an AI giant's flagship model helps security professionals break into a rival company's front door. In a legitimate bug bounty audit, a three-person research team at startup Hacktron AI used Anthropic's Claude to link two critical…
It's not often that an AI giant's flagship model helps security professionals break into a rival company's front door. In a legitimate bug bounty audit, a three-person research team at startup Hacktron AI used Anthropic's Claude to link two critical…
Claude Opus 5 used to hack the OpenAI repository
It's not often that an AI giant's flagship model helps security professionals break into a rival company's front door. In a legitimate bug bounty audit, a three-person research team at startup Hacktron AI used Anthropic's Claude to link two critical…
It's not often that an AI giant's flagship model helps security professionals break into a rival company's front door. In a legitimate bug bounty audit, a three-person research team at startup Hacktron AI used Anthropic's Claude to link two critical…
Claude Opus 5 used to hack the OpenAI repository
It's not often that an AI giant's flagship model helps security professionals break into a rival company's front door. In a legitimate bug bounty audit, a three-person research team at startup Hacktron AI used Anthropic's Claude to link two critical vulnerabilities, gain access to an OpenAI employee's account and access an internal software repository. Researchers Harsh Jaiswal, Mohan Pedhapati, and Rahul Maini are participating in OpenAI's Bugcrowd project.
nanobyte.site
September 18, 2026 at 5:18 PM
Claude Opus 5 used to hack the OpenAI repository
It's not often that an AI giant's flagship model helps security professionals break into a rival company's front door. In a legitimate bug bounty audit, a three-person research team at startup Hacktron AI used Anthropic's Claude to link two critical…
It's not often that an AI giant's flagship model helps security professionals break into a rival company's front door. In a legitimate bug bounty audit, a three-person research team at startup Hacktron AI used Anthropic's Claude to link two critical…
PhantomRaven: The npm Malware Likely Written by an LLM to Fuel Bug Bounty Fraud
PhantomRaven: The npm Malware Likely Written by an LLM to Fuel Bug Bounty Fraud
CrowdStrike has exposed PhantomRaven, a JavaScript infostealer distributed via npm and likely generated with an LLM. The financially motivated actor poses as a bug bounty hunter on platforms like HackerOne, Bugcrowd, and Intigriti but uses stolen credentials to manufacture vulnerabilities for payout
deafnews.it
September 18, 2026 at 10:16 AM
PhantomRaven: The npm Malware Likely Written by an LLM to Fuel Bug Bounty Fraud
Fis scope update on Bugcrowd: +1 in-scope.
Currently $20K ceiling.
https://bountyhunte.rs/programs/bugcrowd-fis
Currently $20K ceiling.
https://bountyhunte.rs/programs/bugcrowd-fis
Fis
Bugcrowd · scope change
bountyhunte.rs
September 12, 2026 at 7:00 AM
Fis scope update on Bugcrowd: +1 in-scope.
Currently $20K ceiling.
https://bountyhunte.rs/programs/bugcrowd-fis
Currently $20K ceiling.
https://bountyhunte.rs/programs/bugcrowd-fis
I am still pissed off at bugcrowd. "Purely theoretical". It's a hardcoded password. What do you need? The line of code where it's in source? The offset in the binary? That every version of that program ever sold is vulnerable?
September 9, 2026 at 7:21 PM
I am still pissed off at bugcrowd. "Purely theoretical". It's a hardcoded password. What do you need? The line of code where it's in source? The offset in the binary? That every version of that program ever sold is vulnerable?
AI agents are poised to be the next hacking victims, cyber CEO predicts https://www.axios.com/2026/09/08/ai-agents-bugcrowd-cyberattacks-hack
#axios #news #usnews
#axios #news #usnews
September 9, 2026 at 4:22 PM
AI agents are poised to be the next hacking victims, cyber CEO predicts https://www.axios.com/2026/09/08/ai-agents-bugcrowd-cyberattacks-hack
#axios #news #usnews
#axios #news #usnews
This week on bountyhunte.rs: 492 new programs, 112 scope changes.
Top launches:
- OpenSea Managed — $3M ceiling on Bugcrowd
- Fireblocks MPC Managed Bug Bounty Engagement — $150K ceiling on Bugcrowd
- T-Mobile — $134K ceiling on Bugcrowd
https://bountyhunte.rs/programs?date=tracked_recently
Top launches:
- OpenSea Managed — $3M ceiling on Bugcrowd
- Fireblocks MPC Managed Bug Bounty Engagement — $150K ceiling on Bugcrowd
- T-Mobile — $134K ceiling on Bugcrowd
https://bountyhunte.rs/programs?date=tracked_recently
Weekly recap — 492 new programs, 112 scope changes
This week on bountyhunte.rs: 492 new programs, 112 scope changes. ·
bountyhunte.rs
September 7, 2026 at 2:00 PM
This week on bountyhunte.rs: 492 new programs, 112 scope changes.
Top launches:
- OpenSea Managed — $3M ceiling on Bugcrowd
- Fireblocks MPC Managed Bug Bounty Engagement — $150K ceiling on Bugcrowd
- T-Mobile — $134K ceiling on Bugcrowd
https://bountyhunte.rs/programs?date=tracked_recently
Top launches:
- OpenSea Managed — $3M ceiling on Bugcrowd
- Fireblocks MPC Managed Bug Bounty Engagement — $150K ceiling on Bugcrowd
- T-Mobile — $134K ceiling on Bugcrowd
https://bountyhunte.rs/programs?date=tracked_recently
According to bugcrowd, a hardcoded password is "purely theoretical" btw
September 6, 2026 at 12:36 PM
According to bugcrowd, a hardcoded password is "purely theoretical" btw
Something about that "LLMs found cheating on tasks in studies" thing that keeps coming up - we've been getting a lot of Bugcrowd submissions that are obviously LLM-generated and a not insignificant number do things like obfuscating a false positive in the POC script. It's pretty heinous.
September 3, 2026 at 7:54 PM
Something about that "LLMs found cheating on tasks in studies" thing that keeps coming up - we've been getting a lot of Bugcrowd submissions that are obviously LLM-generated and a not insignificant number do things like obfuscating a false positive in the POC script. It's pretty heinous.
Two prompt injection paths into Atlassian Rovo, published two days apart.
RovoBlast (Varonis Threat Labs): fixed server-side via Bugcrowd in July, nothing to patch & PromptArmor
Write-up and admin checklist: community.atlassian.com/forums/Rovo...*O:community*I:social_share*
RovoBlast (Varonis Threat Labs): fixed server-side via Bugcrowd in July, nothing to patch & PromptArmor
Write-up and admin checklist: community.atlassian.com/forums/Rovo...*O:community*I:social_share*
August 31, 2026 at 6:45 AM
Two prompt injection paths into Atlassian Rovo, published two days apart.
RovoBlast (Varonis Threat Labs): fixed server-side via Bugcrowd in July, nothing to patch & PromptArmor
Write-up and admin checklist: community.atlassian.com/forums/Rovo...*O:community*I:social_share*
RovoBlast (Varonis Threat Labs): fixed server-side via Bugcrowd in July, nothing to patch & PromptArmor
Write-up and admin checklist: community.atlassian.com/forums/Rovo...*O:community*I:social_share*
How I Made Over $10,000 Just by Chaining Multiple IDORs in a Single Web App (All from the Share…
How I Made Over $10,000 Just by Chaining Multiple IDORs in a Single Web App (All from the Share…
Hey folks 👋
I’m Ferdus, a security researcher and bug hunter. I used to hunt mostly on Bugcrowd under the handle bebe, and now I’m more…
infosecwriteups.com
August 26, 2026 at 5:09 AM
How I Made Over $10,000 Just by Chaining Multiple IDORs in a Single Web App (All from the Share…
got annoyed last night and asked deepseek v4 flash for a bug bounty
now i'm signing up for bugcrowd, i guess. the local verification in docker looks pretty promising
now i'm signing up for bugcrowd, i guess. the local verification in docker looks pretty promising
August 12, 2026 at 1:38 PM
got annoyed last night and asked deepseek v4 flash for a bug bounty
now i'm signing up for bugcrowd, i guess. the local verification in docker looks pretty promising
now i'm signing up for bugcrowd, i guess. the local verification in docker looks pretty promising
This is very cool... I remember sitting with Erica Azad on my last day inside the tent at
@Bugcrowd
as she was just starting to cook up this idea - In the age of "Clank The Planet" it has never…
🔁 RT @caseyjohnellis | reposted by @HackingLZ
https://x.com/caseyjohnellis/status/2085013585554510296
@Bugcrowd
as she was just starting to cook up this idea - In the age of "Clank The Planet" it has never…
🔁 RT @caseyjohnellis | reposted by @HackingLZ
https://x.com/caseyjohnellis/status/2085013585554510296
August 5, 2026 at 2:59 PM
This is very cool... I remember sitting with Erica Azad on my last day inside the tent at
@Bugcrowd
as she was just starting to cook up this idea - In the age of "Clank The Planet" it has never…
🔁 RT @caseyjohnellis | reposted by @HackingLZ
https://x.com/caseyjohnellis/status/2085013585554510296
@Bugcrowd
as she was just starting to cook up this idea - In the age of "Clank The Planet" it has never…
🔁 RT @caseyjohnellis | reposted by @HackingLZ
https://x.com/caseyjohnellis/status/2085013585554510296
In the age of "Clank The Planet" it has never been more important to preserve and promote community, the people who comprise it, and the culture that defines it 🧡 🧡 🧡
www.bugcrowd.com/blog/the-hac...
www.bugcrowd.com/blog/the-hac...
The Hacker Culture Manual | @Bugcrowd
About a year ago, I read Cult of the Dead Cow by Joseph Menn. It gives the history of the original hacking group. I was particularly struck by one of the founding members, Carrie Campbell. She never…
www.bugcrowd.com
August 5, 2026 at 2:42 PM
In the age of "Clank The Planet" it has never been more important to preserve and promote community, the people who comprise it, and the culture that defines it 🧡 🧡 🧡
www.bugcrowd.com/blog/the-hac...
www.bugcrowd.com/blog/the-hac...
So @sophossecurity.bsky.social just doesn't respond to their security e-mail address? Bugcrowd was so nice to mark my vulnerbility as "purely theoretical". Which it is decively not.
August 4, 2026 at 1:56 PM
So @sophossecurity.bsky.social just doesn't respond to their security e-mail address? Bugcrowd was so nice to mark my vulnerbility as "purely theoretical". Which it is decively not.