PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Fortifying Assets for SEC Compliance with HackerOne

hackerone.com | blog | #bug-bounty | #vulnerability-management | #compliance | #risk-management | #ciso | #solarwinds | #governance | #sec
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

After the SEC's new cybersecurity rules and SolarWinds charges, public companies face pressure to invest in proactive vulnerability management, making bug bounty programs a force multiplier.
Published
Collected

Related coverage

blog · yeswehack.com
US SEC cyber rules, SolarWinds CISO charges: How a unified OffSec strategy can enhance your SEC disclosures
Explainer on the SEC's new cyber rules — material-incident reporting and annual risk disclosures — and charges against SolarWinds' CISO, plus why a unified OffSec strategy supports disclosure.
blog · hackenproof.com
What Is Penetration Testing? How It Works, What You Get, and When to Test
A pentest is a time-boxed, authorized attack where ethical hackers chain flaws to prove exploitable risk, not just run scans. It outlines deliverables, audit drivers, and when to test.
blog · jfrog.com
Lessons from the SolarWinds Breach: A Discussion With CISO Tim Brown
Former SolarWinds CISO Tim reflects on the historic Sunburst breach, fighting SEC charges, and securing the build pipeline against emerging AI threats.
blog · certik.com
U.S Legislation September Recap: Congress Blinked. The Regulators Didn’t.
We look at United States regulatory updates in September 2026, including the results of the CLARITY Act votes, updates on tokenized stocks, market structure guidance by the CFTC, and more.
blog · netspi.com
Q&A: Doug Brush Talks Incident Response, DJI Drones, and Mental Health in Cybersecurity
Q&A with Splunk advisory CISO Doug Brush on why incident response evolves slowly, how SolarWinds-style TTPs are nothing new, and why cybersecurity mental health needs top-down prioritization.
blog · netspi.com
The Evolution of the Chief Risk Officer
Risk Neutral CEO Jeff Sauntry on the Chief Risk Officer role's evolution, the five enterprise risk categories, and how security leaders can translate technical risk into board-level language.
Back