MikeTrendsTrends right now

Yhn TechnologyCybersecurity first seen 2 d ago, last 9 min ago, peak #1

Security researcher earns $90k for Google remote code execution flaw

Original: I Found a $90k Remote Code Execution Vulnerability in Google

Security researcher Simon Koeck reports finding a remote code execution vulnerability in Google, which he says earned a $90,000 reward. In a writeup, he describes exploiting an insecure Flask session pickle deserialization issue in a Google developer site. The disclosure is drawing attention as an example of a well-paid bug bounty finding in Google's platform.

Why now: The large payout and technical detail of a remote code execution flaw in Google's infrastructure make it notable to the security community.

GoogleSimon KoeckGoogle Bug Bounty Program

Open on hn →

Rank over time, top of the chart is #1. 108 snapshots from 2 d ago to 9 min ago.

Evidence

API: https://socialmediatrends-api.osmike.com/v1/trends/1990686