Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Why More Government Agencies Need Bug Bounty and Vulnerability Disclosure Programs

bugcrowd.com | incident | #bug-bounty | #vulnerability-disclosure | #government | #policy | #data-breach | #hack-the-pentagon

Summary

Following OPM and IRS breaches and the success of Hack the Pentagon, Bugcrowd urges government agencies at every level to adopt bug bounties and disclosure programs beyond pen testers and scanners.
Published
Collected

original ↗

Related coverage

  1. The hidden cost of agentic pentesting (bugcrowd.com)
  2. Report Smarter, Not Harder: HackerOne's Case for Better CIRCIA Rules (hackerone.com)
  3. A framework for successful vulnerability disclosure policy (yeswehack.com)
  4. Incentive Policy for Coordinated Vulnerability Disclosure (yeswehack.com)
  5. A Payment Platform for Security Researchers—No Bug Bounty Program Required (hackenproof.com)
  6. Securing Critical Infrastructure in the Cloud Era: A Policy and Technology Blueprint (wiz.io)

back