PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Cybersecurity Awareness Month: The Hackers’ Guide to Staying Secure Year Round

bugcrowd.com | blog | #bugcrowd | #third-party-risk | #best-practices | #security-awareness | #tips | #sdlc | #cybersecurity-awareness | #2fa | #cybersecurity-awareness-month | #ncsam | #two-factor-authentication | #security-tips
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Bugcrowd marks Cybersecurity Awareness Month with tips from its Crowd: secure third-party platforms like GitHub, integrate security into the SDLC, and adopt 2FA and privacy basics year-round.
Published
Collected

Related coverage

blog · bugcrowd.com
Ghosts and Ghouls, Witches and Wizards, Bugs and Bugcrowd
Bugcrowd researcher Anon_Hunter marks Halloween with a reminder that cyber threats outlast the spooky season, arguing that basic cyber hygiene and year-round security awareness are the best defense.
blog · netspi.com
Open Source Frameworks – How secure are they?
Open source doesn't mean secure: reviewing one company's untouched framework surfaced nearly 80% of 10,000+ findings, including SQL injection and persistent XSS—vet third-party code accordingly.
blog · bugcrowd.com
Behind the scenes of PHP2Shell: What the last 72 hours taught us
PHP2Shell hit fast. Bugcrowd’s CISO shares what 72 hours of response taught us, plus three lessons for CISOs facing the next critical vulnerability.
blog · bugcrowd.com
CISA’s VDP platform: Five years of collaborative defense
CISA’s VDP Platform marks five years with nearly 45,000 submissions and 5,300+ vulnerabilities fixed across 60+ federal agencies. See the key findings.
blog · bugcrowd.com
Weird ways to hide shellcode
Discover a novel red teaming technique for hiding shellcode inside procedurally generated mazes, using shortest-path algorithms to disguise payloads from EDR and antivirus detection.
blog · bugcrowd.com
How to choose the right live hacking event for your organization
"ot sure which live hacking event fits your program? Compare Virtual, Live in the Loop, Bug Bash, and ReCON to find the right format, scope, and budget.
Back