PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Ask a hacker: Top vulnerabilities to watch out for

bugcrowd.com | blog | #access-control | #bugcrowd | #ciso | #injection | #vrt | #vulnerability-trends | #misconfiguration
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

In the newest edition of Inside the Mind of a CISO, we analyzed hundreds of thousands of vulnerability submission data over the past year of private and public security engagements.
Published
Collected

Related coverage

blog · netspi.com
The Biggest Challenge Facing CISOs Today – and the Key to Winning
A 30-year security veteran shares lessons for CISOs: simple misconfigurations often beat advanced skills, and new senior leaders should focus on understanding the business before spending on tools.
vulnerability · bugcrowd.com
Priority One Report: Bug Bounties Paying out for Deep Testing
Bugcrowd's 2019 Priority One Report finds vulnerabilities and payouts nearly doubled year over year, with findings shifting toward systemic bug classes that automated scanners cannot catch.
blog · bugcrowd.com
Behind the scenes of PHP2Shell: What the last 72 hours taught us
PHP2Shell hit fast. Bugcrowd’s CISO shares what 72 hours of response taught us, plus three lessons for CISOs facing the next critical vulnerability.
blog · bugcrowd.com
CISA’s VDP platform: Five years of collaborative defense
CISA’s VDP Platform marks five years with nearly 45,000 submissions and 5,300+ vulnerabilities fixed across 60+ federal agencies. See the key findings.
blog · bugcrowd.com
Weird ways to hide shellcode
Discover a novel red teaming technique for hiding shellcode inside procedurally generated mazes, using shortest-path algorithms to disguise payloads from EDR and antivirus detection.
blog · bugcrowd.com
How to choose the right live hacking event for your organization
"ot sure which live hacking event fits your program? Compare Virtual, Live in the Loop, Bug Bash, and ReCON to find the right format, scope, and budget.
Back