PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Ultimate Guide to Vulnerability Disclosure: Report Recap

bugcrowd.com | vulnerability | #risk-management | #bugcrowd | #vdp | #vulnerability-disclosure | #security-best-practices | #survey-report
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Bugcrowd recaps its 2020 Ultimate Guide to Vulnerability Disclosure, explaining why VDPs are becoming baseline security practice, with survey data on adoption and industry mandates.
Published
Collected

Related coverage

blog · bugcrowd.com
CISA’s VDP platform: Five years of collaborative defense
CISA’s VDP Platform marks five years with nearly 45,000 submissions and 5,300+ vulnerabilities fixed across 60+ federal agencies. See the key findings.
blog · hackenproof.com
Vulnerability Disclosure Policy: A Guide for Business Leaders
Explains what a vulnerability disclosure policy is and why the EU CRA and NIS2 now make it a compliance expectation, then walks through the key decisions behind each policy section, offering a free template for security and legal teams to adapt.
vulnerability · bugcrowd.com
Bugcrowd Announces the Availability of Self-Service Vulnerability Disclosure Programs
Bugcrowd launches self-service Vulnerability Disclosure Programs: a structured intake and triage pipeline for bug reports, with managed triage for the first 15 or 75 submissions.
vulnerability · bugcrowd.com
The Who, What, Where, and Why of VDPs
An iPhone app averages nearly 50,000 lines of code, making pre-release vulnerability coverage impossible alone. This infographic explains why VDPs are becoming a baseline security practice.
vulnerability · yeswehack.com
CVE-2023-54391 and beyond: excavating silent patches and the attacker-defender information gap
CVE-2023-54391: a Proxmox VE auth bypass fixed silently in 2023, exploited in 2026 before any advisory. The piece taxonomizes 'silent patch gaps' and why AI-assisted diffing makes them cheap to mine.
vulnerability · yeswehack.com
OpenAI VDP for bugs found by AI, CVE funding fears persist, ‘shift left’ towards vulnerability overload – OffSec roundup for CISOs
Roundup: OpenAI's outbound VDP for bugs found by its AI, persistent CVE/NVD funding fears, 'shift left' vulnerability overload, and why Mikko Hyppönen now focuses on drones.
Back