Factoring in whether to include a bug bounty program in your annual cybersecurity budget can be confusing. It’s not often clear exactly what benefits you’ll…
1. Unprepared to Manage Incoming Vulnerability Reports Naturally, the purpose of running a bug bounty program is to identify vulnerabilities beyond what your security team…
I hope you’ve been doing well! John Steven is one of the most technically strong people I’ve ever met, and his interpersonal ninja-ry in causing…
Bug Bytes is a weekly newsletter curated by members of the bug bounty community. The second series is curated by InsiderPhD. Every week, she keeps…
A protester waves a Jihadist flag at a Pro-Palestine protest I think the war in Israel, and the way much of the Left in the…
Have you ever wondered how display monitor software can change various settings like brightness over a simple display cable? As it turns out, this relies…
We know how frustrating it can be to discover new assets that don’t follow your internal security policies, such as using a geolocation that isn’t…
Here is a list of all new modules recently added from our community of ethical hackers. You can find a complete list of new vulnerabilities…
As someone working within AppSec or ProdSec security, the scope and responsibilities of your role have likely changed over the last few years. This is…
It’s not unlikely that your team has a sufficient amount of vulnerability data that they must assess, prioritize, and remediate. Whether that’s a newly discovered…
We’ve made several improvements to how users can interact with their fingerprinted technologies data, grouping IP data by several parameters, and viewing the latest changes…
If you’re involved in securing APIs, applications and web applications, or looking to learn about these, then the OWASP Global AppSec DC Conference next week…
