PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Hacking for €10k rewards and a secure open source ecosystem: Bug Bounty opportunities from the Sovereign Tech Fund

yeswehack.com | blog | #bug-bounty | #open-source | #log4j | #gnome | #critical-infrastructure | #sovereign-tech-fund
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Guide to the Sovereign Tech Fund's seven open-source Bug Bounty Programs — Log4j, systemd, GNOME, ntpd-rs, OpenPGP.js, Sequoia PGP and CycloneDX Rust Cargo — with up to €10,000 rewards.
Published
Collected

Related coverage

blog · blog.trailofbits.com
SequenceHash: multihashing for the rest of us
We're releasing SequenceHash and its sister function SequenceMAC, a pair of related hash constructions that bring secure multihashing to developers using hash functions other than Keccak.
blog · blog.trailofbits.com
1Password's AI patching benchmark is misleading
Trail of Bits says 1Password's FLAWED benchmark misstates AI patch quality, mixing wrong-fix prompts and no-test trials into a 26% clean-fix headline, and ships two agent skills for better fixes.
blog · about.gitlab.com
Building AI security in the open
GitLab has joined the Open Secure AI Alliance to help advance transparent, adaptable approaches to securing AI systems.
blog · hackerone.com
What the UK’s New Cyber Security and Resilience Bill Means for Your Organization
The UK's Cyber Security and Resilience Bill expands NIS obligations, updates incident reporting, and raises expectations for resilience across digital services.
blog · hackerone.com
What Security Leaders Need to Know About the UK’s Updated Cyber Framework
The NCSC's Cyber Assessment Framework v4.0—its biggest update since 2018—adds emphasis on AI risks, supply chain security and vulnerability management for CNI operators under NIS regulations.
blog · hackerone.com
Why Reauthorizing CISA 2015 Is Critical to the AI Action Plan
CISA 2015 is the backbone of public-private cybersecurity collaboration. As Congress faces reauthorization, here's why letting it lapse would put defenders, and national security, at risk.
Back