Why aren't there more bug bounty programs?

FromMalicious Life

Start listening View podcast show

Why aren't there more bug bounty programs?

FromMalicious Life

ratings:

Length:

34 minutes

Released:

Aug 8, 2023

Format:

Podcast episode

Description

On the face of it, there's an obvious economic incentive for both vendors and security researchers to collaborate on disclosing vulnerabilities safely and privately. Yet bug bounty programs have gained prominence only in the past decade or so, and even today only a relatively small portion of vendors have such programs at place. Why is that? Advertising Inquiries: https://redcircle.com/brands

Released:

Aug 8, 2023

Format:

Podcast episode

Titles in the series (100)

Malicious Life by Cybereason tells the unknown stories of the history of cybersecurity, with comments and reflections by real hackers, security experts, journalists, and politicians.

Skip carousel

Weapons of Mass Disruption: The threat of fire and fury stands at the center of all modern conflicts- nuclear bombs that can eradicate life in seconds are the ultimate weapon of war, as they pose a huge threat to centers of population. But what of the cyber war? by Malicious Life
41 min listen
Friend or Foe: The largest hack in U.S military history may have been conducted by… The NSA. In 1997, a wargame conducted by the NSA showed just how unprepared we were for a potential cybernetic strike- in 4 days, NSA hackers were able to take down entire military ne... by Malicious Life
36 min listen
Stuxnet, part 2: Stuxnet was a weapon, a kind of a smart bomb- perhaps one of the smartest bombs ever created. A bomb that couldn’t rely on operators, cameras, and laser targeting, instead it had to “think” its way to its destination. An invisible commando unit, by Malicious Life
27 min listen
Big Cannons: 2016 is known throughout the circles of information security as “The Year of The DDoS Attacks”, and rightfully so: 5 large scale DDoS attacks – ‘Distributed Denial Of Service’ – shocked the technology world. In this episode of Malicious Life, by Malicious Life
45 min listen
Ghost In The Machine: Cybercrime is one of the most notable threats we face as computer users, nowadays. But it wasn’t always so. Those of us who’ve been in the field long enough may remember a time when computer viruses were much more innocent, by Malicious Life
26 min listen
The Dark Avenger: In 1989, a message was found in a virus: “Eddie Lives…Somewhere in Time!”. ‘Eddie’ was a particularly nasty virus, and its discovery led a young Bulgarian security researcher down a rabbit hole, on a hunt for the prolific creator of the Eddie virus: Th... by Malicious Life
30 min listen
Stuxnet, part 1: Where armies once fought with bullets and bombs, they now engage in clandestine, invisible warfare. In 2010 a virus was discovered that would change the world’s perception of cyber warfare forever. Dubbed Stuxnet, by Malicious Life
33 min listen
The Half Life 2 Hack: How far should a die-hard fan go, in order to bring closer to them the thing that they love? In one of the most interesting, yet relatively unknown cybersecurity stories, a young hacker attempts to steal his favorite game prior to its release and then ... by Malicious Life
38 min listen
The Propaganda: Governments around the world have been making devious use of the internet as a platform to spread, not malware, but propaganda. As in all wars, propaganda is a huge part of the modern cyber war. Join us as we explore the roots, by Malicious Life
40 min listen
Spam Empire: In this episode of Malicious Life, we take a look at one of the oldest forms of criminal activity on the web- the spam empires of the 90’s and 2000’s. Find out how these multi-million dollar industries operated, by Malicious Life
31 min listen
Stuxnet, part 3: Stuxnet was a devastating weapon, but who wielded it? That is the question we try to answer with the final installment of our Stuxnet series. In this episode, we explore other, similar battles of the modern cyber war, by Malicious Life
30 min listen
The Soldiers of North Korea: Guerrilla warfare has been around for as long as conventional warfare has. The idea that a small force, through cunning and brazen action, could overtake a larger force is an old one. From pirates who would take merchant ships by surprise, by Malicious Life
34 min listen
The Roots of Evil: WannaCry’s widespread cyber attack on more than 200,000 computers all over the world made headlines – but only a few people remember a similar attack, named The AIDS Trojan, almost 30 years earlier… In this episode of Malicious Life, by Malicious Life
30 min listen
The Target Hack: If movies have taught me anything, it’s that if you want to rob a bank, you dress as the cleaning crew. The people behind the Target hack must have seen one action film too many, because when they decided to hack one of the biggest retailers in the wor... by Malicious Life
34 min listen
China Vs. Github: It’s a weapon that harnessed the strength of millions of computers at once: a cannon so powerful it could break through any wall, take down any website. It is “the Great Cannon”. by Malicious Life
41 min listen
The Whistleblowers: WikiLeaks has ushered in a new age in whistle blowing: Modern leakers such as Chelsea Manning – who’s story is the focus of our current episode – expose huge amounts of confidential information. But can these mega-leaks really influence the actions and... by Malicious Life
36 min listen
The Morris Worm Pt. 1: We’ve introduced you to some of the seminal malware attacks that have shaped cybersecurity history. Perhaps no other incident in history, though, has had the effect on how we think about computer security today as the Morris worm. by Malicious Life
27 min listen
Black Duck Eggs: Darknet Diaries: This week we're doing an episode swap with the excellent podcast Darknet Diaries. A former NSA agent who has gone off to be a security consultant, tells a story about an assignment that he'll never forget... by Malicious Life
32 min listen
Cyber Terrorism: What governments and powerful organizations regularly use, others will find ways to use as well. Cyber activity fits so incredibly well with terrorism. Actors can remain hidden, or reveal themselves to the world; Create propaganda campaign, by Malicious Life
31 min listen
Hell to Pay: A global FBI manhunt for the world’s most wanted cyber criminal ends in the capture of a massive criminal network, but with the escape of the man himself. Security experts who operate within the gray areas of morality develop botnets that destroy perso... by Malicious Life
37 min listen
Deception: From the Bulgarian hacker scene of the 90’s, featured in episodes 1 and 2, we now move to the vibrant underground hacker scene of West and East Berlin. Working secretly for the KGB, a young Berliner hacker attempts to hack the U.S military network, by Malicious Life
30 min listen
The Stuxnet Virus Pt. 2: Stuxnet was a weapon, a kind of a smart bomb- perhaps one of the smartest bombs ever created. A bomb that couldn’t rely on operators, cameras, and laser targeting, instead it had to “think” its way to its destination. An invisible commando unit, by Malicious Life
27 min listen
WoW: Corrupted Blood: How does the outbreak of a “plague” inside a video game- a bug, essentially- affect real-life disease research? by Malicious Life
27 min listen
The Ashley Madison Hack, Part 1: When Ashley Madison got hacked, it made international headlines. Why? Because it wasn’t just a major event. It demonstrated how there’s information even more sensitive, even more significant than your credit card, by Malicious Life
30 min listen
The Ashley Madison Hack, Part 2: On the second installment of our Ashely Madison hack retelling, we look at the fallout of one of the hack, and the people who’ve suffered from it. by Malicious Life
33 min listen
Fancy Bear, Cozy Bear: When representatives from the Democratic National Committee reached out to a silicon valley cybersecurity company, to investigate a potential breach in their computer system, it’s hard to imagine what they might have expected to come of it. by Malicious Life
31 min listen
'Pa Bell' Vs. Youth International Party Line by Malicious Life
40 min listen
The Legalities of the Cyber War: Catching a criminal is by no means easy, but there’s something we take for granted in any crime: that the criminal has a face and a name, that they used a specific weapon on a specific target, and that the crime had ended once it was complete. by Malicious Life
23 min listen
The Stuxnet Virus Pt. 3: Stuxnet was a devastating weapon, but who wielded it? That is the question we try to answer with the final installment of our Stuxnet series. In this episode, we explore other, similar battles of the modern cyber war, by Malicious Life
30 min listen
The Trojan Horse Affair: The early 2000s were an interesting time in Information Security. This is roughly the period when malware transitioned from viruses written by teenagers for fun, to cybercrime tools in the hands of sophisticated criminals. by Malicious Life
22 min listen

More Episodes from Malicious Life

Skip carousel

The Y2K Bug, Part 1 by Malicious Life
27 min listen
Can You Bomb a Hacker? by Malicious Life
31 min listen
Kevin Mitnick, Part 2 by Malicious Life
49 min listen
Kevin Mitnick, Part 1 by Malicious Life
37 min listen
SIM Registration: Security, or Surveillance? by Malicious Life
31 min listen
The Mariposa Botnet by Malicious Life
44 min listen
The Real Story of Citibank’s $10M Hack by Malicious Life
33 min listen
How to Hack Into Satellites by Malicious Life
30 min listen
Moonlight Maze by Malicious Life
35 min listen
Volt Typhoon by Malicious Life
32 min listen
Is NSO Evil? Part 2 by Malicious Life
40 min listen
Is NSO Evil? Part 1 by Malicious Life
32 min listen
Should You Pay Ransomware Attackers? A Game Theory Approach by Malicious Life
33 min listen
Silent Firewalls: The Underrepresentation of Women in Cyber by Malicious Life
30 min listen
Operation Kudo by Malicious Life
34 min listen
Can We Stop the AI Cyber Threat? by Malicious Life
27 min listen
Is Generative AI Dangerous? by Malicious Life
38 min listen
The Voynich Manuscript by Malicious Life
29 min listen
Roman Seleznev: Did the Punishment Fit the Crime? by Malicious Life
38 min listen
Sony BMG's Rootkit Fiasco by Malicious Life
41 min listen
Ad Fraud, Part 2 by Malicious Life
29 min listen
Ad Fraud, Part 1 by Malicious Life
24 min listen
The Economics Of Cybersecurity by Malicious Life
27 min listen
The Reason You Don’t Have Data Privacy by Malicious Life
37 min listen
How Entire Countries Can Lose the Internet by Malicious Life
33 min listen

Related podcast episodes

Skip carousel

1577: Securing Your Startup With Crowdsourced Security: Bugcrowd CEO, Ashish Gupta. by The Tech Talks Daily Podcast
27 min listen
Secure your Supply Chain with an Effective Vendor Security Program: Security risks introduced by vendors have become a top-of-mind concern for executives today, driven by recent supply chain incidents that have exposed organizations to operational and reputational risks. A robust vendor security program is now a must... by ISACA Podcast
16 min listen
Why Transparency Matters & Web Application Prioritization - Mark Ralls, Wayne Haber - ESW #235 by Enterprise Security Weekly (Video)
39 min listen
Why Transparency Matters & Web Application Prioritization - Mark Ralls, Wayne Haber - ESW #235: The shift away from web application security, caused by the pandemic and the focus on remote workforces, resulted in an increased number of web vulnerabilities. In this segment, Mark talks about the best starting point for organizations to get back on... by Security Weekly Podcast Network (Video)
39 min listen
What's the Best Way to Threat Model? - Nick Selby - ASW #229: Organizations spend hundreds of work hours to build applications and services that will benefit customers and employees alike. Whether the application/service is externally facing or for internal use only, it is mandatory to identify and understand... by Application Security Weekly (Video)
38 min listen
What's the Best Way to Threat Model? - Nick Selby - ASW #229 by Security Weekly Podcast Network (Video)
38 min listen
ASW #213 - Janet Worthington: Applications are the most frequent external attack vector for companies. However, application security can improve only if developers either code securely or remediate existing security flaws — unfortunately, many don’t receive training with... by Security Weekly Podcast Network (Audio)
83 min listen
Securing APIs and Applications in the Cloud by That Digital Show
27 min listen
December 30, 2020: Google Docs bug exposes users private documents Kawasaki discloses security breach, potential data leak Brexit deal warns of security dangers of Netscape Communicator Thanks to our sponsor ReversingLabs We’ve seen a 430% growth in next generation... by Cyber Security Headlines
7 min listen
1894: Why Startups Should Care About Cybersecurity: Should small startups care about cybersecurity? Did you know that the average cost of a ransomware attack is $500k? For most small businesses and startups, this means they go out of business. Even if they can afford to pay the ransom, the reputation... by The Tech Talks Daily Podcast
24 min listen
Developing an Effective AppSec Security Program - Brendon Macaraeg - BSW #151: Brendon Macaraeg is the Sr. Director of Product Marketing of Signal Sciences. Focus on the people, processes and tools a dev team needs to put an effective security program in place. Discuss how to improve listener's current program and tooling to... by Security Weekly Podcast Network (Video)
35 min listen
Striking a Balance -The Pitfalls of Excessive Security in Software Development by Continuous improvement
4 min listen
Adelaide Metrics - Measuring media quality and audience attention by Marketecture: Get Smart. Fast.
4 min listen
BSW #306 - Mayeuresh Ektare, Molly McLain Sterling, Lenny Zeltser: Medtronic's Security Ambassador program has seen tremendous growth and engagement in recent years. Learn how they gave their program a shot of adrenaline and haven't looked back since. Cybersecurity teams today are inundated with tools that... by Security Weekly Podcast Network (Audio)
63 min listen
Managing Threats, Reduce your Attack Surface, MDR Evolved - Antonio Sanchez, Randy Watkins, Richard Yew - ESW #328: The rapid growth of APIs used to build microservices in cloud-native architecture has left many enterprises in the dark when it comes to knowing where, how many, and what types of APIs they have. With multiple teams creating their own API endpoints... by Enterprise Security Weekly (Video)
36 min listen
Managing Threats, Reduce your Attack Surface, MDR Evolved - Antonio Sanchez, Randy Watkins, Richard Yew - ESW #328: The rapid growth of APIs used to build microservices in cloud-native architecture has left many enterprises in the dark when it comes to knowing where, how many, and what types of APIs they have. With multiple teams creating their own API endpoints... by Security Weekly Podcast Network (Video)
36 min listen
From Compliance to Resiliency: The Evolution of InfoSec, Part 1 - Tim Callahan - SCW #84: Because only maintaining compliance is not enough to protect your business from the ever-evolving threat landscape, in this session, we will consider the intersection and codependence of compliance with security, maturity, defensibility and... by Security Weekly Podcast Network (Video)
36 min listen
From Compliance to Resiliency: The Evolution of InfoSec, Part 2 - Tim Callahan - SCW #84: Because only maintaining compliance is not enough to protect your business from the ever-evolving threat landscape, in this session, we will consider the intersection and codependence of compliance with security, maturity, defensibility and... by Security Weekly Podcast Network (Video)
48 min listen
Show, Don’t Tell, Your Developers How To Write Secure Code - Janet Worthington - ASW #213: Applications are the most frequent external attack vector for companies. However, application security can improve only if developers either code securely or remediate existing security flaws — unfortunately, many don’t receive training with... by Security Weekly Podcast Network (Video)
43 min listen
Navigating the World of Cybersecurity | Corey White, Cyvatar: Cybersecurity is at the forefront of today's news as the frequency of cyber-attacks continues to escalate alarmingly. Statistics reveal that the number of global cyber-attacks rose by a significant 28% during Q3 of 2022, compared to the previous year.... by Build Tech Stack Equity
50 min listen
CSP #113 - The Rise of the Chief Product Security Officer - Jason Christman: Cybersecurity is becoming a #1 business risk for many organizations. For CISOs to effectively manage this risk, proper strategy, adequate resourcing, and leadership support are all essential, but not enough. CISOs need a trusted partner on the... by CISO Stories Podcast (Audio)
26 min listen
WBSP066: Grow Your Business by Mitigating Financial Risks With New Product Development Initiatives w/ Andrew Lees by WBSRocks: Business Growth with ERP and Digital Transformation
34 min listen
Accelerate 0-Trust Adoption W/ End2End Visibility & Increased Collaboration - Tom Roeh - BSW #232: It's no surprise that Zero Trust initiatives are increasing in importance in both the public and private sectors. New cybersecurity mandates and a boom in remote work due to COVID-19 are just two of the most common factors driving this demand. While... by Security Weekly Podcast Network (Video)
28 min listen
Safe Office – Corona Time – April 24th: To bring our business, tenants and properties back to profitability, providing and promoting a safe environment is crucial. Who better to share appropriate strategies than a CIH, Certified Industrial Hygienist who is also a CSP, Certified Safety Profess... by America‘s Commercial Real Estate Show
36 min listen
Understanding Ad Fraud -- David Finkelstein // BDEX by MarTech Podcast ™ // Marketing + Technology = Business Growth
12 min listen
Show, Don’t Tell, Your Developers How To Write Secure Code - Janet Worthington - ASW #213: Applications are the most frequent external attack vector for companies. However, application security can improve only if developers either code securely or remediate existing security flaws — unfortunately, many don’t receive training with... by Application Security Weekly (Video)
43 min listen
Getting and Staying Cyber Ready with Smarter, Simpler Security and MDR - ESW #316 by Security Weekly Podcast Network (Video)
36 min listen
Getting and Staying Cyber Ready with Smarter, Simpler Security and MDR - ESW #316 by Enterprise Security Weekly (Video)
36 min listen
Security Budgets: All links and images for this episode can be found on CISO Series () How do you calculate a security budget? Is it a percentage of the IT budget? Something else? And why does it grow so drastically after a breach? Thanks to this week's podcast... by Defense in Depth
26 min listen
Managing Shadow Code & the Blind Side in 3rd Party Risk - Stephen Ward - PSW #733: With all of your focus and investment on 3rd party risk management, there is likely still a blind-side that remains unaddressed. It is an area that should be moved to the top of your priority list - both for its potential to cause material losses in... by Security Weekly Podcast Network (Video)
63 min listen

Discover this podcast and so much more

Why aren't there more bug bounty programs?

Why aren't there more bug bounty programs?

Description

Titles in the series (100)

More Episodes from Malicious Life

Related podcast episodes