skip to Main Content
As the healthcare industry continues to move into the digital age, each new technology that provides value to patients, organizations, and caregivers also brings with it unique cybersecurity risks. IT systems, connected medical devices, digital health applications, electronic patient records…
Earlier this year, we took a closer look at why every company should have a vulnerability disclosure program. As veterans with combined 40+ years in the cybersecurity space, Bugcrowd founder and CTO Casey Ellis and CSO David Baker each gave…
In the past year, the U.S. Federal Trade Commission (FTC) and Department of Justice (DOJ) have released guidance outlining the need for vulnerability disclosure programs (VDP). With support from major legislative bodies like the National Institute of Standards and Technology,…
We are always updating our Vulnerability Rating Taxonomy (VRT), integrating our learnings into each version update. We are thrilled to announce our latest release, VRT 1.7 in response to our community’s ongoing feedback through our open-sourced GitHub repository. Security misconfiguration…
Today we released the 2019 edition of the Inside the Mind of a Hacker Report, highlighting the makeup of the bug hunting community to provide insight and understanding into who they are, what they like to do, their experiences, skillsets,…
Attack surfaces over the past decade have become more complex than ever, and the overall surface area has ballooned significantly. As our world continues to come online, cybersecurity vulnerabilities become even more apparent. No one thinks—or cares—more about cybersecurity than…
Penetration testing has become a best practice for vulnerability assessment over the past two decades, but in recent years we’ve seen this traditional security assessment method falls short. The application development process is speeding up and data breaches continue to…
Organizations in nearly every industry are feeling pressure to deliver value faster, get to market ahead of the competition, and continuously improve their customer experience. For software applications built and deployed today, it is all about velocity and automation. This is good for innovation but often leads to inconsistencies, vulnerabilities and problems with upgrades and code review.
According to the CVE, 2017 saw 14,713 published vulnerabilities, an increase of more than 128% from last year. For 2018, the CVE has already seen more than 5K published vulnerabilities so we should see the upward trajectory continue. This past…
Today we are excited to announce Vulnerability Remediation Advice, our newest feature on Crowdcontrol™! With Vulnerability Remediation Advice, Development and Security can accelerate the remediation process, introducing secure coding methodologies that help educate development, improve code velocity and reduce risk.…
