PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

[GUEST POST] Ibotta Launches Public Bug Bounty Program with Bugcrowd to Secure Payments Ecosystem

bugcrowd.com | blog | #bug-bounty | #bugcrowd | #crowdsourced-security | #program-launch | #payments | #ibotta
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Ibotta expands its private Bugcrowd program into a paid public bug bounty to protect its Pay with Ibotta payments ecosystem, after paying out over $30,000 and surfacing P1/P2 findings since 2015.
Published
Collected

Related coverage

blog · yeswehack.com
‘Bug Bounty helps us meet regulatory requirements ahead of time’: payments provider KOMOJU
KOMOJU's Bug Bounty lead on how crowdsourced testing helps the Tokyo payments provider meet regulatory requirements early and harden digital assets, even with limited security resources.
blog · bugcrowd.com
Behind the scenes of PHP2Shell: What the last 72 hours taught us
PHP2Shell hit fast. Bugcrowd’s CISO shares what 72 hours of response taught us, plus three lessons for CISOs facing the next critical vulnerability.
blog · bugcrowd.com
CISA’s VDP platform: Five years of collaborative defense
CISA’s VDP Platform marks five years with nearly 45,000 submissions and 5,300+ vulnerabilities fixed across 60+ federal agencies. See the key findings.
blog · bugcrowd.com
Weird ways to hide shellcode
Discover a novel red teaming technique for hiding shellcode inside procedurally generated mazes, using shortest-path algorithms to disguise payloads from EDR and antivirus detection.
blog · bugcrowd.com
How to choose the right live hacking event for your organization
"ot sure which live hacking event fits your program? Compare Virtual, Live in the Loop, Bug Bash, and ReCON to find the right format, scope, and budget.
blog · bugcrowd.com
Agentic vs human offensive security testing: Where AI actually earns its keep
Bugcrowd's CTO and offensive security lead break down where agentic security testing earns trust, where human judgment still wins, and how to roll it out without burning engineering's confidence.
Back