PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Resilience through community: Looking forward to 2021

yeswehack.com | blog | #bug-bounty | #community | #crowdsourced-security | #trends | #yeswehack | #annual-review
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

YesWeHack's 2020 retrospective: its community reached 20,000 ethical hackers and crowdsourced security became a new standard, with vulnerability trends shifting toward design and implementation flaws.
Published
Collected

Related coverage

blog · yeswehack.com
‘I usually choose targets that offer value to society’: krevetk0 on his principled approach to Bug Bounty hunting
Berlin-based Bug Bounty hunter krevetk0 talks about moving from QA into hacking, choosing socially valuable targets such as healthcare and banking, and the findings that shaped his career.
blog · yeswehack.com
‘Having humans in the loop’: Crédit Agricole Personal Finance & Mobility on the value of Bug Bounty
Security leaders from Crédit Agricole Personal Finance & Mobility explain how they scoped their bug bounty program, the value of crowd diversity and triage, and plans for AI-related scopes.
blog · yeswehack.com
Codex vs Claude Code vs Gemini CLI: Where each AI agent fits in your Bug Bounty workflow
We put Claude Code, Codex and Gemini CLI through PortSwigger labs covering discovery, exploitation and validation. See how each performed.
blog · yeswehack.com
Why pentests cause security debt
New features ship, dependencies update, new APIs are added… and all the while, despite your pentest program, security debt mounts up.
blog · yeswehack.com
The scariest stat in vulnerability management (is wrong)
"TTE is now negative". Is it, though? What does that actually mean? And how is the typical experience of defenders changing? Let's find out.
blog · yeswehack.com
Be sceptical, but be safe
We're all hearing some big claims about AI-assisted cyberattacks. But what's really going on, and how defenders can respond?
Back