PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

‘YesWeHack adapted to our needs’: The Bug Bounty story so far for connected health pioneer Withings

yeswehack.com | blog | #bug-bounty | #iot | #privacy | #customer-story | #healthcare | #withings
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Q&A with Loïc Deleforterie, Bug Bounty lead at connected-health pioneer Withings: why it started a private invite-only program, how it complements pentesting, and plans to scale up testing.
Published
Collected

Related coverage

blog · netspi.com
Speaking to a City of Amazon Echoes
Probes Amazon's Echo calling feature by bulk-importing phone contacts, finding 65 registered Echo devices in one exchange, and raising questions about how easily devices can be enumerated.
blog · netspi.com
HIPAA May not Protect Compulsive Liars
A NetSPI post uses an employee's fake cancer leave to explore PHI leaks via hospital inquiries: confirming whether a patient is admitted, or routing calls, can itself disclose protected information.
blog · yeswehack.com
‘Bug Bounty perfectly aligns with DORA requirements’: EU fintech Sogexia reaps benefits of continuous testing
Sogexia's CPTO explains why Bug Bounty 'perfectly aligns' with DORA's continuous-testing requirements, how it compares to pentests and how it keeps pace with rapid product updates.
blog · yeswehack.com
‘Bug Bounty helps us meet regulatory requirements ahead of time’: payments provider KOMOJU
KOMOJU's Bug Bounty lead on how crowdsourced testing helps the Tokyo payments provider meet regulatory requirements early and harden digital assets, even with limited security resources.
blog · yeswehack.com
‘The unpredictability and creativity of actual threat actors’: Energy giant NOV reaps the rewards of Bug Bounty
Energy giant NOV's security directors on why they launched a Bug Bounty Program, the real-world attacker mindset hunters bring, and plans for a tighter feedback loop to bake security in by design.
blog · yeswehack.com
‘We wanted a lot of researchers testing our scope’: Entrust’s experience scaling a Bug Bounty Program
Entrust (formerly Onfido) security engineer Luca Sangalli on scaling a Bug Bounty Program: pay-by-results economics, gradually raising rewards, triage benefits and keeping hunters engaged.
Back