PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Bugcrowd’s commitment to CISA’s “Secure by Design” Pledge

bugcrowd.com | blog | #cisa | #compliance | #cve | #bugcrowd | #vulnerability-disclosure | #secure-by-design | #mfa
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Bugcrowd details compliance with CISA's Secure by Design Pledge: eliminating default passwords, mandating MFA, reducing vulnerability classes, CVE adoption, and public disclosure policies.
Published
Collected

Related coverage

blog · wiz.io
How Wiz Meets CISA “Secure by Design” Objectives
Wiz, a founding participant in CISA's Secure by Design initiative, details its pledge progress—no-cost SAML 2.0 SSO, mandatory MFA for direct logins, no default passwords, and least-privilege service accounts.
blog · bugcrowd.com
CISA’s VDP platform: Five years of collaborative defense
CISA’s VDP Platform marks five years with nearly 45,000 submissions and 5,300+ vulnerabilities fixed across 60+ federal agencies. See the key findings.
blog · hackerone.com
Report Smarter, Not Harder: HackerOne's Case for Better CIRCIA Rules
This coverage gives security teams current context for monitoring, validation, and remediation.
blog · hackenproof.com
Vulnerability Disclosure Policy: A Guide for Business Leaders
Explains what a vulnerability disclosure policy is and why the EU CRA and NIS2 now make it a compliance expectation, then walks through the key decisions behind each policy section, offering a free template for security and legal teams to adapt.
blog · aikido.dev
Cyber Resilience Act is here! Myth busting and first impressions
Aikido Security's first impressions of the EU Cyber Resilience Act's first reporting deadline, covering the new Single Reporting Platform, its 24/72-hour and 14-day timelines, and compliance myths.
blog · wiz.io
Scan for Good: Using AI to discover and fix high-priority exposures across public services and critical infrastructure
Wiz's Scan for Good pairs AI scanning with human researchers to find public exposures in critical infrastructure and nonprofits, driving hundreds of fixes with Google DeepMind and CISA support.
Back