PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Saxo Bank Celebrates One Year of Bug Bounties

hackerone.com | blog | #bug-bounty | #case-study | #financial-services | #hackerone | #banking
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

HackerOne sits down with Saxo Bank to reflect on the first year of its bug bounty program and the lessons learned running crowdsourced security testing at a European bank.
Published
Collected

Related coverage

blog · hackenproof.com
Inside American Express India's Cloud Storage Exposure
An open MongoDB exposed 3M American Express India records, including Aadhaar and PAN numbers. What happened, and does Amex run a bug bounty today?
blog · netspi.com
Cybersecurity for Financial Institutions—Part 2: Metrics
Explore measurable and actionable metrics every bank should track to craft a powerful cybersecurity story for their regulators.
blog · netspi.com
Cybersecurity for Financial Institutions—Part 1: An Overview
Read an overview of the state of cybersecurity in the financial industry and three considerations to better protect your organization and customers.
blog · netspi.com
Leading Financial Institution Leveraged NetSPI Red Team Service to Improve Their Security Posture
NetSPI describes a black box red team engagement for a major US bank's subsidiary: OSINT and a robo-caller vishing attack harvested employee credentials used to attempt VPN access to the network.
blog · hackerone.com
Measuring The Fix: How We Evaluate Frontier Models on Remediation Quality
HackerOne tested frontier models on security fix quality and found the judge mattered more than the model. See how CTEM remediation earns engineer trust.
blog · hackerone.com
Critical PHP Vulnerabilities: What Security Teams Need to Know
Learn about the critical PHP vulnerabilities, HackerOne’s response, and the rise in reports. Review patching guidance and coordinated disclosure practices.
Back