PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Are you a Secure Code Warrior?

bugcrowd.com | blog | #ctf | #developer-security | #secure-coding | #bugcrowd | #tournament | #owasp-top-10 | #levelup0x07
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Bugcrowd partners with Secure Code Warrior for a 24-hour LevelUp0x07 tournament where developers fix vulnerabilities based on the OWASP Top 10 across multiple languages.
Published
Collected

Related coverage

blog · aikido.dev
How to maintain code quality standards with AI code and vibe coding
As AI-written code piles up faster than review can absorb, technical debt compounds until shipping slows; the piece covers pull-request quality checks and why model self-review is not enough.
blog · jfrog.com
Agentic Development Security is a Discipline that Starts Before the First Line of Code
Agentic development security starts before code: govern what coding agents produce and what they consume—MCP servers, skills, plugins, access—because you can only block artifacts you inventory.
blog · bugcrowd.com
Behind the scenes of PHP2Shell: What the last 72 hours taught us
PHP2Shell hit fast. Bugcrowd’s CISO shares what 72 hours of response taught us, plus three lessons for CISOs facing the next critical vulnerability.
blog · bugcrowd.com
CISA’s VDP platform: Five years of collaborative defense
CISA’s VDP Platform marks five years with nearly 45,000 submissions and 5,300+ vulnerabilities fixed across 60+ federal agencies. See the key findings.
blog · bugcrowd.com
Weird ways to hide shellcode
Discover a novel red teaming technique for hiding shellcode inside procedurally generated mazes, using shortest-path algorithms to disguise payloads from EDR and antivirus detection.
blog · bugcrowd.com
How to choose the right live hacking event for your organization
"ot sure which live hacking event fits your program? Compare Virtual, Live in the Loop, Bug Bash, and ReCON to find the right format, scope, and budget.
Back