PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Bigbank Launches Vulnerability Disclosure Program

bugcrowd.com | vulnerability | #bugcrowd | #case-study | #vdp | #triage | #financial-services | #program-launch | #managed-triage | #bigbank | #estonia | #vulnerability-disclosure-program
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Estonian bank Bigbank moves to a managed Bugcrowd VDP after its self-run program was flooded by inconsistent reports; managed triage filters noise and helps surface systemic issues faster.
Published
Collected

Related coverage

vulnerability · bugcrowd.com
Bugcrowd Announces the Availability of Self-Service Vulnerability Disclosure Programs
Bugcrowd launches self-service Vulnerability Disclosure Programs: a structured intake and triage pipeline for bug reports, with managed triage for the first 15 or 75 submissions.
blog · bugcrowd.com
CISA’s VDP platform: Five years of collaborative defense
CISA’s VDP Platform marks five years with nearly 45,000 submissions and 5,300+ vulnerabilities fixed across 60+ federal agencies. See the key findings.
blog · yeswehack.com
‘Having humans in the loop’: Crédit Agricole Personal Finance & Mobility on the value of Bug Bounty
Security leaders from Crédit Agricole Personal Finance & Mobility explain how they scoped their bug bounty program, the value of crowd diversity and triage, and plans for AI-related scopes.
blog · yeswehack.com
‘No cheaper way of getting security testing’: financial services Bug Bounty success story
Finance-sector case study: Bug Bounty proved ~90% cheaper than pentesting, complements internal testing on internet-facing assets, and began with a VDP after two good-faith bug reports.
blog · netspi.com
Leading Financial Institution Leveraged NetSPI Red Team Service to Improve Their Security Posture
NetSPI describes a black box red team engagement for a major US bank's subsidiary: OSINT and a robo-caller vishing attack harvested employee credentials used to attempt VPN access to the network.
vulnerability · bugcrowd.com
[Guest Post] SoundCloud Takes its Bug Bounty Program Public
SoundCloud security engineer Tobias Schmidt announces a public bug bounty on Bugcrowd, paying up to $1,500 per valid vulnerability across its website, APIs and mobile apps.
Back