Hacker-Powered Security Report 2024-25

According to 8th edition of Hacker-Powered Security Report 2024-25, what is the top vulnerability reported to a bug bounty program?

• 1. Misconfiguration

• 1. Cross-site scripting (XSS)

• 1. Sensitive information disclosure

• 1. Business logic errors

True or False: According to 8th edition of Hacker-Powered Security Report 2024-25, HackerOne has seen a 67% increase in pentesting over the past year.

• True

• False

According to 8th edition of Hacker-Powered Security Report 2024-25, what is the average number of researchers on a high-impact program?

• 1. 34

• 1. 9

• 1. 56

• 1. 171

According to Jasmin Landry, Security Researcher and HackerOne Pentester, cited in 8th edition of Hacker-Powered Security Report 2024-25, what is a significant risk posed by AI?

• 1. Training-data leaks

• 1. Unauthorized AI usage within organizations

• 1. The hacking of AI models by external parties

• 1. AI introducing more vulnerabilities

1.  What are some recommendations for running a top-tier security program found in the 8th edition of Hacker-Powered Security Report 2024-25?

• 1. Offer constructive feedback on reports.

• 1. Offer the highest bounties possible.

• 1. Clearly communicate expected response times.

• 1. Respond to researchers with respect and professionalism.

True or False: The concept of return on mitigation (ROM) was recently introduced by HackerOne.

• True

• False

What are the three key traits of high-impact bug bounty programs according to the 8th edition of Hacker-Powered Security Report 2024-25?

• 1. Higher bounties

• 1. Smaller, focused communities

• 2. Stricter acceptance criteria for researchers

• 1. Broader testing scope

1. What are some recommendations for securing a budget for proactive security measures, according to the 8th edition of Hacker-Powered Security Report 2024-25?

• 2. Focus on showcasing cost savings

• 1. Make a strong business case

• 2. Identify the critical systems in scope for the program

• 1. Prepare for unexpected high-severity vulnerabilities

Match the industry with its featured vulnerability as highlighted in the 8th edition of Hacker-Powered Security Report 2024-25:

• Cross-site scripting (XSS)

• Government

• Information Disclosure

• Financial Services

• Improper Authentication

• Retail and E-Commerce

• Business Logic Errors

• Telecoms

• Insecure direct object reference (IDOR) 

• Crypto and Blockchain

1. According to the 8th edition of Hacker-Powered Security Report 2024-25, how much of an organization's budget will be spent on the top 10 common vulnerabilities?

• 54%

• 63%

• 72%

• 81%