PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Inside Security@ Dallas: Insights to Attract Elite Researchers and Prove ROI

hackerone.com | research | #bug-bounty | #case-study | #hackerone | #roi | #researcher-engagement | #security-at
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

At Security@ Dallas, CBRE and TikTok leaders showed how bug bounty ROI and triage support win executive buy-in; researchers favor programs with clear commitment and communication.
Published
Collected

Related coverage

blog · hackenproof.com
Inside American Express India's Cloud Storage Exposure
An open MongoDB exposed 3M American Express India records, including Aadhaar and PAN numbers. What happened, and does Amex run a bug bounty today?
research · portswigger.net
Responsible denial of service with web cache poisoning
James Kettle shows how web cache poisoning can take down websites with a single request without collateral damage, earning bounties from Tesla and HackerOne along the way.
research · bugcrowd.com
How CrowdMatch Strengthens Crowd Engagement and Improves Researcher Rewards
Bugcrowd's CrowdMatch ML engine pairs researchers with fitting programs using a decade of Security Knowledge Graph data, lifting valid submissions 70%, payouts over 80%, and doubling P1-P3 findings.
research · github.com
Steal My Bitcoin Challenge Writeup: PHP 8.4.26 Session Upload Progress Memory Exhaustion Analysis
Provides a detailed binary-level case study on PHP Zend memory manager behavior and worker state persistence after fatal out-of-memory errors.
research · projectdiscovery.io
PHP2Shell: finding and patching affected PHP
Two CVSS 9.2 bugs in the PHP runtime allow unauthenticated code execution; the patch is a package upgrade and a restart, and this guide shows how to find every PHP runtime you need to patch.
research · wiz.io
Wiz on Wiz: How the Wiz FinOps Team Uses Wiz Cloud Cost
Wiz's own FinOps team explains using Wiz Cloud Cost to diagnose spend spikes and run win-win optimizations, pairing macro-level BI tools with granular infrastructure context.
Back