PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Introducing the Overstock.com Vulnerability Disclosure Program

bugcrowd.com | vulnerability | #bugcrowd | #vdp | #vulnerability-disclosure | #program-launch | #e-commerce | #overstock
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Overstock.com publicly launches a vulnerability disclosure program on Bugcrowd, letting its global research community report security issues directly to the retailer's IT security team.
Published
Collected

Related coverage

blog · bugcrowd.com
CISA’s VDP platform: Five years of collaborative defense
CISA’s VDP Platform marks five years with nearly 45,000 submissions and 5,300+ vulnerabilities fixed across 60+ federal agencies. See the key findings.
blog · hackenproof.com
Vulnerability Disclosure Policy: A Guide for Business Leaders
Explains what a vulnerability disclosure policy is and why the EU CRA and NIS2 now make it a compliance expectation, then walks through the key decisions behind each policy section, offering a free template for security and legal teams to adapt.
vulnerability · bugcrowd.com
Bugcrowd Announces the Availability of Self-Service Vulnerability Disclosure Programs
Bugcrowd launches self-service Vulnerability Disclosure Programs: a structured intake and triage pipeline for bug reports, with managed triage for the first 15 or 75 submissions.
vulnerability · bugcrowd.com
Bigbank Launches Vulnerability Disclosure Program
Estonian bank Bigbank moves to a managed Bugcrowd VDP after its self-run program was flooded by inconsistent reports; managed triage filters noise and helps surface systemic issues faster.
vulnerability · bugcrowd.com
[Guest Post] SoundCloud Takes its Bug Bounty Program Public
SoundCloud security engineer Tobias Schmidt announces a public bug bounty on Bugcrowd, paying up to $1,500 per valid vulnerability across its website, APIs and mobile apps.
vulnerability · bugcrowd.com
Intercom launches public bug bounty; offers up to $1,500 per vulnerability
Intercom moved its Bugcrowd bounty to public, paying up to $1,500 per vulnerability. Scope covers the main application and iOS and Android SDKs, part of its secure development lifecycle.
Back