PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

OSS Security Maturity: Time to Put On Your Big Boy Pants!

bugcrowd.com | blog | #webinar | #security-maturity | #supply-chain-security | #oss | #blackberry | #risk-based-security
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

A Bugcrowd webcast features Jake Kouns and BlackBerry's Christine Gadsby discussing OSS security maturity: third-party library risks, evaluating real impact, and BlackBerry's OSS maturity model.
Published
Collected

Related coverage

blog · bugcrowd.com
Security isn’t static: Why your strategy should evolve like your threats
Security strategy must evolve in phases: gain visibility into assets, validate risk through pen tests and bug bounties, then build continuous assurance loops instead of waiting for audits or incidents.
blog · bugcrowd.com
[Webinar Recap] 3 Reasons to Swap Your Next Penetration Test for a Bug Bounty
Recap of an SC Magazine webinar where Bugcrowd's Jason Haddix and Instructure's Wade Billings explain why Canvas swapped its last three penetration tests for bug bounties.
blog · bugcrowd.com
Webinar Recap: How Three Security Vendors Approach Security
Bugcrowd's webinar recap features Barracuda, OneLogin and Sophos security leaders on appsec resource shortages and sensitive data, with DevSecOps training and bug bounties as force multipliers.
blog · portswigger.net
What steps can you take toward evolving your organization's security maturity?
DevSecOps maturity is best built progressively in established enterprises: start with frequent scanning alongside regular pentesting and expand as buy-in grows into a virtuous cycle.
blog · blog.trailofbits.com
How CISA can improve OSS security
Responding to a US RFI on OSS security, Trail of Bits proposes memory-safe rewrites in Rust, stronger supply chains, large-scale vulnerability reduction, and better developer education.
blog · bishopfox.com
Red Teaming: 2023 Insights from the Ponemon Institute
Ponemon Institute findings from 664 practitioners: 47% rank Red Teaming among the most effective offensive strategies, valued for testing worst-case scenarios against real-world TTPs.
Back