PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Walk me through Open My Heart – Live Bug Bounty event with Lazada

yeswehack.com | blog | #bug-bounty | #customer-story | #yeswehack | #ecommerce | #singapore | #live-hacking | #lazada
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

A walkthrough of 'Open My Heart', YesWeHack's first Singapore Live Bug Bounty with Lazada at HITBSecConf 2022, and how the e-commerce giant scaled its program from 20 hunters to 40,000+ researchers.
Published
Collected

Related coverage

blog · yeswehack.com
‘Bug Bounty has become a security best practice’: Why Ferrero is sweet on crowdsourced testing
Ferrero's security team on its bug bounty journey: scaling to ~130 hunters, handling report spikes, hosting Italy's first live hacking event, and treating crowdsourced testing as best practice.
blog · yeswehack.com
L'Oréal lauds live Bug Bounty success at LeHack 2024
Recap of L'Oréal's 18-hour live Bug Bounty at LeHack: 71 vulnerabilities found across e-commerce, mobile and B2B assets, a mid-event scope extension, and DinDinDin topping the board.
blog · yeswehack.com
‘Our businesses are reassured that we’re protecting their activities’: Les Mousquetaires CISO on leveraging live hacking events
Q&A with Fabrice Bru, CISO at French retail group Les Mousquetaires: why it held a live hacking event at leHACK, and how its Bug Bounty program grew from 10 hunters on intermarche.com to 80.
blog · yeswehack.com
Navigating the Waters of Bug Bounty: Lessons Learned from Brittany Ferries’ Live Event
Brittany Ferries' CISO shares lessons from Battleship, Europe's first maritime live Bug Bounty: preparation, internal concerns and the 48-hour hunt that hardened its online booking platform.
blog · yeswehack.com
Southeast Asia eCommerce platform Lazada launches public Bug Bounty program with YesWeHack
Lazada opened a public bug bounty with YesWeHack after an 18-month private program that paid over US$150,000, offering up to US$10,000 per report to protect customer data on its eCommerce platform.
blog · yeswehack.com
Boosting E-Commerce Security: PrestaShop's Success with YesWeHack's Public Bug Bounty Program
Interview with PrestaShop's senior core developer on going public with its YesWeHack bug bounty program, citing vulnerability discovery, researcher reach and customer trust.
Back