PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Navigating the Waters of Bug Bounty: Lessons Learned from Brittany Ferries’ Live Event

yeswehack.com | blog | #bug-bounty | #crowdsourced-security | #customer-story | #yeswehack | #maritime | #live-hacking | #brittany-ferries
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Brittany Ferries' CISO shares lessons from Battleship, Europe's first maritime live Bug Bounty: preparation, internal concerns and the 48-hour hunt that hardened its online booking platform.
Published
Collected

Related coverage

blog · yeswehack.com
‘Bug Bounty has become a security best practice’: Why Ferrero is sweet on crowdsourced testing
Ferrero's security team on its bug bounty journey: scaling to ~130 hunters, handling report spikes, hosting Italy's first live hacking event, and treating crowdsourced testing as best practice.
blog · yeswehack.com
‘Having humans in the loop’: Crédit Agricole Personal Finance & Mobility on the value of Bug Bounty
Security leaders from Crédit Agricole Personal Finance & Mobility explain how they scoped their bug bounty program, the value of crowd diversity and triage, and plans for AI-related scopes.
blog · yeswehack.com
‘Bug Bounty helps us meet regulatory requirements ahead of time’: payments provider KOMOJU
KOMOJU's Bug Bounty lead on how crowdsourced testing helps the Tokyo payments provider meet regulatory requirements early and harden digital assets, even with limited security resources.
blog · yeswehack.com
‘Our businesses are reassured that we’re protecting their activities’: Les Mousquetaires CISO on leveraging live hacking events
Q&A with Fabrice Bru, CISO at French retail group Les Mousquetaires: why it held a live hacking event at leHACK, and how its Bug Bounty program grew from 10 hunters on intermarche.com to 80.
blog · yeswehack.com
‘Start small – but start now!’ Inside Orange’s Bug Bounty journey with YesWeHack
The telco's Bug Bounty Program manager discusses the value of continuous, crowdsourced testing and a creative way to leverage bug reports for internal training.
blog · yeswehack.com
Walk me through Open My Heart – Live Bug Bounty event with Lazada
A walkthrough of 'Open My Heart', YesWeHack's first Singapore Live Bug Bounty with Lazada at HITBSecConf 2022, and how the e-commerce giant scaled its program from 20 hunters to 40,000+ researchers.
Back