PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Congratulations to our most dedicated researchers in Q2 2019!

bugcrowd.com | blog | #bug-bounty | #bugcrowd | #program-policy | #researcher-rewards | #incentives | #duplicate-submissions | #bounty-slayers | #duplicate-abuse | #program-changes
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Bugcrowd names its Q2 2019 Bounty Slayers while curbing duplicate abuse: from Q3 only resolved or unresolved P1-P4 submissions count, with thresholds of 30 for standard and 40 for Power Up rewards.
Published
Collected

Related coverage

blog · bugcrowd.com
Congratulations to our most dedicated researchers in Q1 2019!
Bugcrowd announces its first Q1 2019 Bounty Slayers class and tunes the program: from Q2, standard rewards require 40 valid P1-P4 submissions and Power Up requires 60, up from 10 and 15.
vulnerability · bugcrowd.com
How Bugcrowd sees Vulnerability Disclosure Programs and Points
Bugcrowd disables kudos points on VDPs starting June 1, clarifying that private invites are driven by proven skill on high-impact reports rather than point chasing that fueled duplicate spam.
blog · bugcrowd.com
Behind the scenes of PHP2Shell: What the last 72 hours taught us
PHP2Shell hit fast. Bugcrowd’s CISO shares what 72 hours of response taught us, plus three lessons for CISOs facing the next critical vulnerability.
blog · bugcrowd.com
CISA’s VDP platform: Five years of collaborative defense
CISA’s VDP Platform marks five years with nearly 45,000 submissions and 5,300+ vulnerabilities fixed across 60+ federal agencies. See the key findings.
blog · bugcrowd.com
Weird ways to hide shellcode
Discover a novel red teaming technique for hiding shellcode inside procedurally generated mazes, using shortest-path algorithms to disguise payloads from EDR and antivirus detection.
blog · bugcrowd.com
How to choose the right live hacking event for your organization
"ot sure which live hacking event fits your program? Compare Virtual, Live in the Loop, Bug Bash, and ReCON to find the right format, scope, and budget.
Back