Ransomware groups are now using bug bounty tactics

4 redmug 2 7/20/2025, 4:37:30 PM

Some ransomware gangs are crowd-sourcing exploits and paying researchers for zero-days. It’s basically a black hat bug bounty program. Are we ready for this shift in the threat landscape?

Comments (2)

bigyabai · 3h ago

> Are we ready for this shift in the threat landscape?

Depends on how much your business pays for bug bounties, doesn't it?

PaulHoule · 3h ago

I made a decision not to get involved in the dark side of the industry. You can end up like

https://en.wikipedia.org/wiki/Vardan_Kushnir

https://en.wikipedia.org/wiki/Davis_Wolfgang_Hawke

Even if you go the "ethical" route you can get sued and have your life made miserable. So I quit looking for security holes.

Avoiding Management (funcall.blogspot.com)

Welcoming the Next Generation of Programmers (lucumr.pocoo.org)

The Guardian view on social networks: the friendships that can change your life (theguardian.com)

In recent layoffs, AI's role may be bigger than companies are letting on (cnbc.com)

The First Foldable iPhone Will Arrive Next Year in Un-Apple-Like Fashion (bloomberg.com)

'I love you': Virus caused B. in damage and exposed vulnerabilities which remain (cnn.com)

Why do we still flatten embedding spaces?

How Star Trek fans gave the Space Shuttles better names (bbc.com)

Ask HN: Looking for alpha testers for HRAM (asm)

Signals (37signals.com)

Show HN: Daily AI Times (siddanthemani.github.io)

The Fundamental Problem with Urbanism (unchartedterritories.tomaspueyo.com)

The Asus Dumpster Fire [video] (youtube.com)

Affection Displays and Relationship Satisfaction in Indonesia, Nepal, and Poland (journals.plos.org)

Spack v1.0 (github.com)

Naturalized Citizens Are Scared (theatlantic.com)

Trixie Release Planning (lists.debian.org)

Many Butterflies Have a Second 'Head' – This Could Be Why (sciencealert.com)

Amnban Files: Inside Iran's Cyber-Espionage Factory Targeting Global Airlines (blog.narimangharib.com)

New experiment challenges Bohmian quantum mechanics (physicsworld.com)

Superbugs could kill millions more and cost $2T a year by 2050, models show (theguardian.com)

Some Notes on Project Management (andrewpwheeler.com)

What do I need to do before throwing away old tech? (rnz.co.nz)

Apple in China (nationalreview.com)

After vibe coding, AI code feels numb and meaningless

You Might Not Need LangChain for Your Next AI App (shuvrojit.substack.com)

All the books I won't read (kg.dev)

Retro emojis: We had 'em in the 80s and 90s (dfarq.homeip.net)

Storing Data in Bubbles – Bubble Memory [video] (youtube.com)

Steve Jobs on the Mythical Man Month [video] (youtube.com)

The Foo Archive (soda.privatevoid.net)

Briefo – AI-powered finance and news social app (Perplexity Hackathon winner) (briefo.fun)

Heartbound Is Unfinishable [video] (youtube.com)

Simple Parking Strategies (arxiv.org)

Reaction Engines' administrators line up sale of hypersonic technology (flightglobal.com)

Elephant Birds (en.wikipedia.org)

Democracy by the Book: Is data the last lingua franca? (hedgehogreview.com)

Show HN: Turn your Jira backlog into client-ready slide decks in under 2 minutes (agileplus.io)

Tools vs. Truth (blog.usv.com)

AWS EC2 Instance Timeline (instancetyp.es)

Massive Leak on Wikimedia Sites (wikipediasucks.co)

Charting a Path to New Treatments for Lyme Infection-Associated Chronic Illness (nap.nationalacademies.org)

Reverse engineering a 'tony' 6502-based game console [video] (youtube.com)

ChatGPT connected with security database. Nothing to say more (chatgpt.com)

Fmtlib / fmt A modern formatting library (github.com)

Rands Cheat Sheet on 1:1s (randsinrepose.com)

Is DeepSeek a New Voice Among LLMs in Public Opinion Simulation? (arxiv.org)

Deeper Theories of Program Design (typesanitizer.com)

Show HN: SuppFlow – AI assistant that replies to your customer support emails

Atari Ireland: Tipperary's Arcade Connection (arcadeblogger.com)

Ransomware groups are now using bug bounty tactics

Comments (2)