PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

[Guest Blog] Calling All Bug Hunters: Sophos Teams Up with Bugcrowd

bugcrowd.com | research | #bug-bounty | #partnership | #bugcrowd | #responsible-disclosure | #sophos | #guest-blog
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

In a guest post, Sophos explains its Bugcrowd-powered responsible disclosure program, describing how formal triage improved response times and how rewards range from kudos to swag.
Published
Collected

Related coverage

research · bugcrowd.com
[Guest Post] The next era of Bug Bounty at Pinterest
Pinterest's product security team reviews its Bugcrowd program: 150+ valid reports and $35,000 paid since 2015, VRT-based rewards, and newly increased bounties across all severity tiers.
research · bugcrowd.com
Ethical Security Research on SecureDrop
After a QR-code malware incident aimed at journalists, SecureDrop and Bugcrowd publish ethical research rules — no malware on live instances, no DoS — and add rewards up to $2,500 for valid findings.
research · blog.quarkslab.com
A Story About Three Bluetooth Vulnerabilities in Android
Recounts three Android Bluetooth vulnerabilities reported by Quarkslab in 2018: two went unanswered yet were fixed later (one rated Critical RCE), plus disclosure-process notes.
research · projectblack.io
Announcing Partnerships with KnowBe4 and Sophos
Project Black announces partnerships with KnowBe4 for security awareness training and simulated phishing, and Sophos for EDR, MDR and network protection — expanding its security services portfolio.
research · github.com
Steal My Bitcoin Challenge Writeup: PHP 8.4.26 Session Upload Progress Memory Exhaustion Analysis
Provides a detailed binary-level case study on PHP Zend memory manager behavior and worker state persistence after fatal out-of-memory errors.
research · projectdiscovery.io
PHP2Shell: finding and patching affected PHP
Two CVSS 9.2 bugs in the PHP runtime allow unauthenticated code execution; the patch is a package upgrade and a restart, and this guide shows how to find every PHP runtime you need to patch.
Back