March 2022 Summaries

Organizations are constantly under threat in an ever-changing world and require a strong first line of defense to protect themselves and their customers from cyber attacks. Bugcrowd's Security Knowledge Platform orchestrates data, technology, and human intelligence to find blind spots before attackers do, and remediate them more quickly. To further enhance security protection, Bugcrowd is introducing Multi-Factor Authentication (MFA) to its platform, ensuring team members are authenticated before accessing Bugcrowd programs, providing an additional layer of security and confidence in who is accessing these programs.

In the cybersecurity industry, Blue Teams ("Defenders") attempt to prevent and catch Red Teams ("Attackers"), while Purple Teams (Hybrid) aim to bridge the gap between attacker and defender mindsets by collaborating on security assessments. The Bugcrowd Security Knowledge Platform contributes to all three functions - Red Team augmentation with a crowd of trusted ethical hackers, standardization and scaling of workflows for collaboration, and integration with SDLC to facilitate knowledge sharing and feedback loops. By adopting a hybrid approach, organizations can improve their defensive capabilities and uncover hidden risks in the attack surface, ultimately enhancing their overall security posture.

Kiteworks is launching a program promotion with BugCrowd to address sensitive content communications, a largely unaddressed risk-management gap that leaves organizations vulnerable to data breaches and compliance violations. The goal of this program is to enhance Kiteworks' security posture, reach more ethical hackers, discover new vulnerabilities, and demonstrate the company's security commitment to clients. To participate in this program, researchers should have skills in web application security, API security, OAuth security, and other relevant areas, and be able to demonstrate a clear impact of their findings. By leveraging a diverse crowd of ethical hackers, Kiteworks aims to tackle new challenges and improve its ability to quickly identify and remediate vulnerabilities.