bug bounty

ptaas and bug bounty

PTaaS vs. Bug Bounty Programs: Complementary or Competing Approaches?

| | bug bounty, Penetration Testing, pentesting
Introduction Imagine you’re the CISO of a rapidly growing tech company. Your infrastructure is expanding daily, and with each new line of code, the potential attack surface grows. How do... The post ...
Strobes Security
Shocking SQL Injection in TSA App & Bitcoin ATM Scams Targeting Seniors

Shocking SQL Injection in TSA App, Bitcoin ATM Scams Targeting Seniors

| | atm, Bitcoin, Bitcoin ATM, bug bounty, Cyber Security, Cybersecurity, Data Privacy, Digital Privacy, Elderly, Episodes, Exploit, Hacking, Information Security, Infosec, Podcast, Podcasts, Privacy, scam, Scams, security, Security Research, Security Researcher, Senior Citizens, Seniors, sql injection, sqli, technology, tsa, vulnerability, Weekly Edition
This week, we discuss a critical SQL injection vulnerability discovered in an app used by the TSA, raising ethical questions about responsible disclosure. Plus, we shed light on the alarming rise of ...
Shared Security Podcast
Two stacks of money on top of a white table.

Google Splashes the Cash in Bug Bounty Bonanza: $59 Million to Date

| | alphabet, bounty, bug bounty, bug bounty program, bugbounty, ethical hacker, ethical hackers, ethical hacking, google, SB Blogwatch, Vulnerability Rewards Program (VRP), white hat, white hat hacker, white hat hackers, White Hat Security, White Hats, WhiteHat, whitehat hackers, WhiteHat Security
Wanna be a VRP VIP? Last year, $GOOG paid $10 million to ethical hackers for finding vulnerabilities ...
Security Boulevard

Jason Haddix on Bug Bounties and Cybersecurity Career Growth

| | Arcanum Information Security, Bug Bounties, bug bounty, career, career growth, Cyber Security, Cybersecurity, cybersecurity career, Data Privacy, Digital Privacy, Episodes, Information Security, Infosec, Jason Haddix, jobs, mentors, Mentorship, Podcast, Podcasts, Privacy, security, technology, Weekly Edition
In episode 316, we have the pleasure to chat with Jason Haddix, a prominent influencer in the cybersecurity community. With an intriguing career path, from being a ‘computer kid’, venturing into the ...
Shared Security Podcast
vulnerability ADA bots standing Boa Web3 NIST supply chain digital data

Web Vulnerability Submissions Exploded in 2023

| | Application Security, AppSec, bug bounty, bugcrowd, SaaS, vulnerability, web
There was an alarming surge of user-submitted web vulnerability submissions in 2023—with a 30% increase compared to 2022—as open-scoped bug bounty programs evolved ...
Security Boulevard
Google bug bounty AI

Google Expands Bug Bounty Program to Find Generative AI Flaws

| | bug bounty, Cybersecurity, generative AI, google
Google, a big player in the rapidly expanding world of Ai, is now offer rewards to researchers who find vulnerabilities in its generative AI software. Like Microsoft, Amazon, and other rivals, Google ...
Security Boulevard

Educating the Next Cybersecurity Generation with Tib3rius

| | Application Security, AppSec, Bug Bounties, bug bounty, Burp Suite, career, Content Creation, Cyber Security, Cybersecurity, cybersecurity career, Data Privacy, Digital Privacy, Episodes, hacker, Hacking, Information Security, Infosec, penetration tester, Penetration Testing, pentesting, Podcast, Podcasts, Privacy, security, TCM Security, technology, Tib3rius, training, Veracode, Web App Hacking, Web Application Hacking, web applications, Web Apps, Weekly Edition
In this episode we explore the remarkable journey of Tib3rius, a web application hacking expert and content creator. In this engaging conversation, we discuss: Tib3rius’ passion for community education and content creation ...
Shared Security Podcast
NTT Data, platform, SOC, BOTS SOC Open Systems Palo Alto Kaspersky zScaler

Boss of the SOC: Capture-the-Flag as a Recruitment Tool

| | .conf, Bots, bug bounty, Capture the Flag, Cybersecurity Training, Splunk
Splunk's Boss of the SOC (BOTS) exercise helps cybersecurity pros show off skills and also serves as a valuable recruiting tool ...
Security Boulevard
Google Pixel Can be Unlocked via SIM Swap (Other Android Phones, Too)

Google Pixel Can be Unlocked via SIM Swap (Other Android Phones, Too)

| | android, AOSP, Bug Bounties, bug bounty, bug bounty program, CVE-2022-20465, David Schütz, Google Pixel, lockscreen, puk, responsible disclosure, SB Blogwatch, Sounds like an excellent exploit designed by Google to assist law enforcement, Vulnerability Disclosure
A Hungarian researcher found a nasty Android security bug: Malicious people can unlock your phone ...
Security Boulevard
#NahamCon2022 - Jason Haddix (@jhaddix): The Bug Hunter’s Methodology: Application Analysis v1

The Bug Bounty Dilemma: When to give up on an API target

| | API Hacking Mindset, bug bounty, make money hacking apis
Hacking APIs for fun and profit requires you to know how long to stay on target, and knowing when to give up. Let's discuss. The post The Bug Bounty Dilemma: When to ...
Dana Epp's Blog
Load more