PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Inside the Platform: Bugcrowd’s Vulnerability Trends Report

bugcrowd.com | vulnerability | #bug-bounty | #bugcrowd | #crowdsourced-security | #data-analysis | #vulnerability-trends | #annual-report
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Bugcrowd's annual Inside the Platform report analyzes 2023 vulnerability submissions: higher P1 rewards and open scopes drove 10x more critical findings, while government submissions surged 151%.
Published
Collected

Related coverage

vulnerability · bugcrowd.com
Priority One Report: Bug Bounties Paying out for Deep Testing
Bugcrowd's 2019 Priority One Report finds vulnerabilities and payouts nearly doubled year over year, with findings shifting toward systemic bug classes that automated scanners cannot catch.
vulnerability · hackerone.com
This Season, Give the Gift of Data-Driven Insight
HackerOne holiday data shows vulnerability reports rise in the two weeks after Thanksgiving, with XSS surging as online shopping peaks; XSS draws 27.9% of all bounties paid across industries.
vulnerability · bugcrowd.com
Bugcrowd Announces the Availability of Self-Service Vulnerability Disclosure Programs
Bugcrowd launches self-service Vulnerability Disclosure Programs: a structured intake and triage pipeline for bug reports, with managed triage for the first 15 or 75 submissions.
vulnerability · bugcrowd.com
Track Vulnerability Trends and Drive Action with Updated Insights Dashboard
Bugcrowd announces a major Insights dashboard update for Crowdcontrol, adding submission trends by target, severity and vulnerability type, plus program performance and bounty spending metrics.
vulnerability · bishopfox.com
The State of Vulnerabilities in 2022
An analysis of publicly disclosed bug bounty reports from January–July 2022, surfacing the most frequent vulnerability types, severity trends, and top payouts, including a $29,000 GitLab file read.
vulnerability · yeswehack.com
Vulnerability Disclosure Policy as a first step of GfK’s crowdsourced security strategy
GfK's security team explains why it started with a Vulnerability Disclosure Policy before Bug Bounty, using the VDP as a low-risk first step to build a business case and earn internal trust.
Back