PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

YesWeHack marks first year of Bug Bounty partnership with Singapore government

yeswehack.com | blog | #bug-bounty | #government | #yeswehack | #singapore | #govtech | #gbbp
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

YesWeHack marks one year as partner for Singapore's Government Bug Bounty Programmes: four runs, 20+ agencies, over US$250,000 in researcher rewards, with the next run set for late 2025.
Published
Collected

Related coverage

blog · hackerone.com
Hacker Spotlight: Interview with samengmg
Singapore's Samuel Eng (@samengmg) ranked among the top hackers on the GovTech bug bounty program, having also found critical bugs for Verizon Media, Airbnb, Sony, Starbucks, and Dropbox.
blog · hackerone.com
Q & A With Singaporean Hacker @Kactros_n
Interview with Singaporean hacker Nicholas Lim (kactros_n), a top-3 performer in the GovTech bug bounty program. He started hacking at 25 and recalls a rare side-channel timing attack find.
blog · hackerone.com
Hacking the Singapore Government: Q&A with Hacker Personality Samuel Eng
Interview with Samuel Eng (@samengmg), a self-taught Singaporean hacker and GovTech top performer who favors server-side bugs like SSRF and SSTI, recalling a PDF-generator SSRF with WAF bypass.
blog · yeswehack.com
Codex vs Claude Code vs Gemini CLI: Where each AI agent fits in your Bug Bounty workflow
We put Claude Code, Codex and Gemini CLI through PortSwigger labs covering discovery, exploitation and validation. See how each performed.
blog · yeswehack.com
Why pentests cause security debt
New features ship, dependencies update, new APIs are added… and all the while, despite your pentest program, security debt mounts up.
blog · yeswehack.com
The scariest stat in vulnerability management (is wrong)
"TTE is now negative". Is it, though? What does that actually mean? And how is the typical experience of defenders changing? Let's find out.
Back