9 Of The Biggest Bug Bounty Programs

[TechWeb](?elq_mid=79759&elq_cid=22844169&_mc=NL_DR_EDT_DR_daily_20170814&cid=NL_DR_EDT_DR_daily_20170814&elqTrackId=1130a0657e2b4afa92f5fe0d55b48cf6&elq=4134c8186755477a92466802c84f3d71&elqaid=79759&elqat=1&elqCampaignId=27604) Follow Dark Reading: [RSS]( August 14, 2017 Top!Top?elq_mid=79759&elq_cid=22844169 LATEST SECURITY NEWS & COMMENTARY [9 Of The Biggest Bug Bounty Programs]( These programs stand out for the size of their rewards and how much they have paid in total to security researchers in bounties over the last several years. [HBO Offers Hackers $250,000 as 'Show Of Good Faith' on $6 Ransom Request](250000-as-show-of-good-faith-on-$6-ransom-request-/d/d-id/1329625?elq_mid=79759&elq_cid=22844169&_mc=NL_DR_EDT_DR_daily_20170814&cid=NL_DR_EDT_DR_daily_20170814&elqTrackId=8bc0e345a168446999ad28b35e99ef8f&elq=4134c8186755477a92466802c84f3d71&elqaid=79759&elqat=1&elqCampaignId=27604) The offer was reportedly designed to stall for time, with no plans to ever pay it. [APT28 Uses EternalBlue to Spy on Hotel Wifi Networks]( Hacker group APT28 is using the EternalBlue hacking tool to spread throughout hotel networks and collect guests' information. [MORE NEWS & COMMENTARY]( HOT TOPICS [Microsoft Fixes 27 Remote Code Execution Flaws]( Microsoft issued patches for 48 vulnerabilities as part of its monthly Patch Tuesday update, 25 of which were 'critical.' [NIST Releases Cybersecurity Definitions for the Workforce]( In an effort to bring consistency when describing the tasks, duties, roles, and titles of cybersecurity professionals, the National Institute of Standards and Technology released the finalized draft version of its framework. [Breaches Are Coming: What Game of Thrones Teaches about Cybersecurity]( Whether you're Lord Commander of the Night's Watch or the CISO of a mainstream business, it's not easy to defend against a constantly evolving threat that is as deadly as an army of White Walkers. [MORE]( IN CASE YOU MISSED IT [The Patching Dilemma: Should Microsoft Fix Flaws in Older Tech?]( When researchers find vulnerabilities that leave older systems exposed, should the software giant create patches or encourage upgrades? Experts weigh in. Tech Resources - [The DomainTools Report: Spring 2017 Edition]( - [GDPR: What It Means & How SAS Data Mgmt Can Help]( - [Network Intelligence at Tomorrow's Scale](s-scale/390263?elq_mid=79759&elq_cid=22844169&_mc=NL_DR_EDT_DR_daily_20170814&cid=NL_DR_EDT_DR_daily_20170814&elqTrackId=d2cab8b0227b44efaa3ef4e91aa91ac9&elq=4134c8186755477a92466802c84f3d71&elqaid=79759&elqat=1&elqCampaignId=27604) - [Case Study: Fortune 15 Enterprise Company - Threat Intel with Iris]( - [Survey Report: Cyber Threat Intelligence Uses, Successes and Failures](-successes-and-failures/391013?elq_mid=79759&elq_cid=22844169&_mc=NL_DR_EDT_DR_daily_20170814&cid=NL_DR_EDT_DR_daily_20170814&elqTrackId=01e4d11da05940338814df696b440b68&elq=4134c8186755477a92466802c84f3d71&elqaid=79759&elqat=1&elqCampaignId=27604) - [Cybersecurity 101: The Fundamentals of Today's Threat Landscape](E2%80%99s-threat-landscape-/391153?elq_mid=79759&elq_cid=22844169&_mc=NL_DR_EDT_DR_daily_20170814&cid=NL_DR_EDT_DR_daily_20170814&elqTrackId=41141fc2fd164dafbab26b31c47abca2&elq=4134c8186755477a92466802c84f3d71&elqaid=79759&elqat=1&elqCampaignId=27604) - [ABC's of Extreme Archiving]( [ACCESS TECH LIBRARY NOW]( - [Threat Intelligence Overload?]( A wide range of threat intelligence feeds and services have cropped up keep IT organizations up to date on the latest security threats. But without mechanisms in place to actually use the information, these alerts provide little benefit. - [Threat Intelligence + Orchestration Playbooks = faster, more effective response]( Finding ways to increase speed, accuracy, and efficiency when responding to threats should be the goal of any security team. Baking threat intelligence into the day-to-day efforts of detecting and responding to threats is a great way to see some ... [MORE WEBINARS]( Partner Perspectives [6 Ways CISOs Can Play a Role in Selling Security]( When customers ask tough questions about data security, business service resilience, privacy, regulatory, and reputational risk it's best to remain upbeat and positive. Here's how. [Fight 'Credential Stuffing' with a New Approach to Authorization]( Token-based authorization that lets users prove their identity through Facebook, Google, or Microsoft credentials can dramatically reduce your attack surface and give enterprises a single point of control. [Can Your Risk Assessment Stand Up Under Scrutiny?]( Weak risk assessments have gotten a pass up until now, but that may be changing. Middle!Middle?elq_mid=79759&elq_cid=22844169 FEATURED REPORTS - [[Security Breach Report] Overall Impact of & Steps to Prevent Breaches]( Despite the escalation of cybersecurity staffing and technology, enterprises continue to suffer data breaches and compromises at an alarming rate. How do these breaches occur? How are enterprises responding, and what is the impact of these compromises on the business? ... - [How to Invest in Cybersecurity & Prioritize Resources](strategic-security-report]-how-enterprises-are-attacking-the-cybersecurity-challenge/390403?elq_mid=79759&elq_cid=22844169&_mc=NL_DR_EDT_DR_daily_20170814&cid=NL_DR_EDT_DR_daily_20170814&elqTrackId=5b92c8f5a9284b5e9116ee66f3f042f6&elq=4134c8186755477a92466802c84f3d71&elqaid=79759&elqat=1&elqCampaignId=27604) In 2016, enterprises encountered a range of new exploits and threats -- including ransomware and state-sponsored attacks -- and developed new plans of defense. How will these organizations be investing their cybersecurity budgets and staffing in the next 12 months? What tools ... [MORE REPORTS]( CURRENT ISSUE [Security Vulnerabilities: The Next Wave]( [DOWNLOAD THIS ISSUE]( [SUBSCRIBE NOW]( [BACK ISSUES]( | [MUST READS]( | [TECH DIGEST]( PRODUCTS & RELEASES [Hackers: Privileged Accounts Provide Fastest Access to Sensitive, Critical Data]( [Darktrace Releases Version 3 of its AI Cyber Defense Solution]( [Security Summit Alert: Tax Pros Warned of New Scam to Steal Their Passwords]( [MORE PRODUCTS & RELEASES]( Dark Reading Daily -- Published By [InformationWeek](?elq_mid=79759&elq_cid=22844169&_mc=NL_DR_EDT_DR_daily_20170814&cid=NL_DR_EDT_DR_daily_20170814&elqTrackId=561d476e473f43d4a5e4cb94377ca51c&elq=4134c8186755477a92466802c84f3d71&elqaid=79759&elqat=1&elqCampaignId=27604) UBM Tech 2 Penn Plaza, 15th Floor, New York, NY 10121 To update your profile, change your e-mail address, or unsubscribe, [cick here.]( To opt-out of any future Dark Reading Daily Newsletter emails, please respond [here.]( Thoughts about this newsletter? [Give us feedback.](mailto:email@techwebnewsletters.com) Keep This Newsletter Out Of Your SPAM Folder Don't let future editions go missing. Take a moment to add the newsletter's address to your anti-spam white list: If you're not sure how to do that, ask your administrator or ISP. Or check your anti-spam utility's documentation. We take your privacy very seriously. Please review our [Privacy Statement.]( [© 2017]( | [UBM Tech]( | [Privacy Statement]( | [Terms Of Service]( | [Contact Us](mailto:iwkbtnnewsletters@ubm.com)