PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Securing Digital Transformation with Vulnerability Disclosure: A Q&A with John Deere CISO, James Johnson

hackerone.com | vulnerability | #vdp | #interview | #ciso | #hackerone | #digital-transformation | #john-deere
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

John Deere CISO James Johnson explains why the agricultural equipment giant launched a public Vulnerability Disclosure Program with HackerOne to protect customers, dealers, suppliers, and employees.
Published
Collected

Related coverage

vulnerability · yeswehack.com
Vulnerability Disclosure Policy through the eyes of a bug hunter
An interview with ethical hacker Clement 'SaxX' Domingo on what a Vulnerability Disclosure Policy is, how it differs from bug bounty programs, and why few companies have set one up.
blog · hackerone.com
Critical PHP Vulnerabilities: What Security Teams Need to Know
Learn about the critical PHP vulnerabilities, HackerOne’s response, and the rise in reports. Review patching guidance and coordinated disclosure practices.
blog · jfrog.com
Lessons from the SolarWinds Breach: A Discussion With CISO Tim Brown
Former SolarWinds CISO Tim reflects on the historic Sunburst breach, fighting SEC charges, and securing the build pipeline against emerging AI threats.
blog · tenzai.com
An open-weight model powered the #1 HackerOne VDP research operation
Tenzai's AI hacker topped the world's largest bug bounty leaderboard on GLM 5.2, a model anyone can download, and the offensive capability once limited to a few frontier labs is now within anyone's reach.
vulnerability · yeswehack.com
OpenAI VDP for bugs found by AI, CVE funding fears persist, ‘shift left’ towards vulnerability overload – OffSec roundup for CISOs
Roundup: OpenAI's outbound VDP for bugs found by its AI, persistent CVE/NVD funding fears, 'shift left' vulnerability overload, and why Mikko Hyppönen now focuses on drones.
vulnerability · yeswehack.com
US House passes bill mandating vulnerability disclosure policies for federal contractors
The US House passed a bill mandating VDPs for federal contractors, consistent with NIST guidelines; the roundup also covers the UK Home Office's own vulnerability disclosure policy launch.
Back