PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Customer AMA webinar recap: Schibsted

bugcrowd.com | research | #bug-bounty | #bugcrowd | #case-study | #triage | #schibsted | #researcher-relations | #webinar
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Schibsted's appsec team explains why the Nordic media group launched a bug bounty, how it structures scope and severity-based payouts, and how it builds lasting relationships with researchers.
Published
Collected

Related coverage

vulnerability · bugcrowd.com
Bugcrowd Announces the Availability of Self-Service Vulnerability Disclosure Programs
Bugcrowd launches self-service Vulnerability Disclosure Programs: a structured intake and triage pipeline for bug reports, with managed triage for the first 15 or 75 submissions.
blog · hackenproof.com
Inside American Express India's Cloud Storage Exposure
An open MongoDB exposed 3M American Express India records, including Aadhaar and PAN numbers. What happened, and does Amex run a bug bounty today?
research · bishopfox.com
Separating Signal from Slop: Triaging CVEs in the Age of AI Security Research
CVE disclosures are up 85% while exploitation barely moved. Bishop Fox breaks down four Nginx CVEs that looked critical but rarely affect real deployments.
research · github.com
Steal My Bitcoin Challenge Writeup: PHP 8.4.26 Session Upload Progress Memory Exhaustion Analysis
Provides a detailed binary-level case study on PHP Zend memory manager behavior and worker state persistence after fatal out-of-memory errors.
research · projectdiscovery.io
PHP2Shell: finding and patching affected PHP
Two CVSS 9.2 bugs in the PHP runtime allow unauthenticated code execution; the patch is a package upgrade and a restart, and this guide shows how to find every PHP runtime you need to patch.
research · wiz.io
Wiz on Wiz: How the Wiz FinOps Team Uses Wiz Cloud Cost
Wiz's own FinOps team explains using Wiz Cloud Cost to diagnose spend spikes and run win-win optimizations, pairing macro-level BI tools with granular infrastructure context.
Back