PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

‘The red team’s security skills have increased considerably’: Bug Bounty at Bancolombia

yeswehack.com | blog | #bug-bounty | #red-team | #customer-story | #banking | #bancolombia | #latam
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Q&A with Bancolombia red teamer Lucas Zuluaga Pérez: in a year the bank's Bug Bounty program scaled from 5 hackers on 2 sites to 50 on 30 — and the red team's security skills grew with it.
Published
Collected

Related coverage

blog · yeswehack.com
‘Large amount of knowhow’: Why Thüringer Aufbaubank harnesses Bug Bounty to bolster customer trust
Q&A with Jürgen Krug, software engineering head at German development bank Thüringer Aufbaubank: Bug Bounty complements compliance-driven pentests with hunters' 'large amount of knowhow'.
tool · projectdiscovery.io
Enhanced Team Management, 2FA, and Asset Filtering - PDCP (v0.8.7)
We are pleased to unveil our latest release of ProjectDiscovey Cloud Platform, v0.8.7, packed with features that streamline team management, enhance security, and improve asset operations—particularly for enterprise security engineers. Read on to learn what's new. Multi-Team Creation & Member Segregation We've introduced the ability to create multiple teams, providing greater flexibility and control over project management. Create multiple teams Segment users and teams, centralize b
tool · projectdiscovery.io
March 2024 Newsletter
The latest release of Nuclei, v3.2, introduces significant updates aimed at enhancing the security scanning capabilities of the Nuclei engine.
tool · projectdiscovery.io
Introducing Chaos Bug bounty recon data API
We’re proud to announce release of our Chaos Bug bounty recon data API today. This API will allow hackers to get instant data on targets of their choice without running any additional tools at just single hit of request. Goals behind the project Reconnaissance is complex, it requires a proper setup and not everyone is equally good at it. People are skilled differently, some are amazing at looking at Web Attack Surfaces, some prefer to dive deep into logic bugs. Being good at recon requires some
blog · yeswehack.com
‘Bug Bounty perfectly aligns with DORA requirements’: EU fintech Sogexia reaps benefits of continuous testing
Sogexia's CPTO explains why Bug Bounty 'perfectly aligns' with DORA's continuous-testing requirements, how it compares to pentests and how it keeps pace with rapid product updates.
blog · yeswehack.com
‘When we ask for help, it’s instant’: Banco Galicia on expanding vulnerability discovery and speeding up remediation
Banco Galicia's security leads on launching a Bug Bounty program — 'an eternal pentest' complementing internal red teams — and how YesWeHack's fast triage support accelerates remediation.
Back