Connect with us
ANE Scholarship
Categories:
X

Technology

Bug Bounty Radar: August 2022’s newest bug bounty programs

Published

on

Bug Bounty Radar: August 2022's newest bug bounty programs
Share this post:

Summer is here in the northern hemisphere, but this hasn’t interrupted the steady stream of new bug bounty programs from hitting the market.

During the teaser for its new Lockdown Mode this month, Apple said vulnerabilities in the new anti-spyware tech can be disclosed via its Security Bounty program. Rewards of up to $2 million are on offer.

Lockdown Mode, which will ship with iOS 16, iPadOS 16, and macOS Ventura, is described as “an extreme, optional protection for the very small number of users who face grave, targeted threats to their digital security”.

Australia’s Monash University has also established a new bug bounty program, which is aimed at shoring up its defenses amid a spate of cyber-attacks impacting the education sector.

Added to the mix this month are two new rewards programs for the burgeoning digital identity market, as Onfido partners with YesWeHack and India’s Aadhaar dips its toe in the water with a program of its own.

Aadhaar is world’s largest digital identity program that provides services to over 1.3 billion Indian residents. To take part in this new, private bug bounty, hackers must apply via the UIDAI website.

There’s a high bar for entry, too, as Aadhaar stipulates that “candidates should be listed in the top 100 of the bug bounty leaderboards such as HackerOne, Bugcrowd, or listed in the bounty programs conducted by reputable companies such as Microsoft, Google, Facebook, [or] Apple”.

The latest bug bounty programs for August 2022

The past month saw the arrival of several new bug bounty programs. Here’s a list of the latest entries:

Aadhaar

Program provider:
Independent

Program type:
Private

Max reward:
TBD

Outline:
In an effort to secure Aadhaar data hosted in UIDAI’s Central Identities Data Repository (CIDR), UIDAI is planning the launch of a new bug bounty program.

Notes:
Full application details can be found on the UIDAI website. The number of participants is being limited to 20, all of whom must be Indian residents.

Apple – Lockdown Mode

Program provider:
Independent

Program type:
Public

Max reward:
$2 million

Outline:
Apple has established a new category within the Apple Security Bounty program to reward researchers who find Lockdown Mode bypasses and help improve its protections.

Notes:
Bounties have been doubled for qualifying findings in Lockdown Mode, up to a maximum of $2 million – one of the highest maximum payouts in the industry.

BKEX

Program provider:
HackenProof

Program type:
Public

Max reward:
$10,000

Outline:
BKEX is a global digital asset trading platform, featuring more than 1,200 cryptocurrencies.

Notes:
The financial service company’s new bug bounty program is replete with a range of in-scope web attack vectors, including remote code execution (RCE), SQL injection vulnerabilities, file inclusion and access control issues, server-side request forgery (SSRF), cross-site request forgery (CSRF), cross-site scripting (XSS), and directory traversal.

ClickHouse

Program provider:
Bugcrowd

Program type:
Public

Max reward:
$2,500

Outline:
ClickHouse is an open source, column-oriented OLAP database management system that allows users to generate analytical reports using SQL queries in real time. The main focus of the public program is the open source version of the ClickHouse platform.

Notes:
“No technology is perfect, and ClickHouse believes that working with skilled security researchers across the globe is crucial in identifying weaknesses in any technology,” the company said. “We are excited for you to participate as a security researcher to help us identify vulnerabilities in our open source assets.”

Monash University

Program provider:
Bugcrowd

Program type:
Public

Max reward:
$2,500

Outline:
Monash University in Melbourne, Australia, has launched a public bug bounty program to help maintain the security of its digital platforms.

Notes:
In-scope targets include the main Monash University web domain and mobile apps, along with various technologies that are used by the institution, including its VPN and FileShare instances.

Onfido

Program provider:
YesWeHack

Program type:
Private

Max reward:
TBD

Outline:
Digital identity verification company Onfido has launched a new bug bounty program, in partnership with European vulnerability disclosure platform YesWeHack.

Notes:
Commenting on the partnership, Alex Valle, chief product officer at Onfido, said: “Security and compliance are essential to our mission of creating a more open world, where identity is the key to online access, and we are always looking for ways to strengthen this.”

SideFX

Program provider:
HackerOne

Program type:
Public

Max reward:
$3,000

Outline:
Canada-based SideFX is the developer of Houdini, a 3D animation software application used in film, television, advertising, and video games.

Notes:
Only vulnerabilities discovered in the company’s main web domain, sidefx.com, are applicable under the terms of this new bug bounty program.

ZBWeb

Program provider:
HackenProof

Program type:
Public

Max reward:
$5,000

Outline:
Founded in 2013, ZB.com is a worldwide digital trading platform, facilitating the exchange and management of digital assets from all corners of the globe.

Notes:
In-scope web vulnerabilities include business logic issues, payment manipulation, RCE, SQL injection, access control issues, SSRF, CSRF, XSS, and other vulnerabilities with a “clear potential loss”.

Other bug bounty and VDP news this month

  • HackerOne has disclosed details of an incident involving a former employee who was accused of accessing internal data for personal financial gain.
  • Go DaddyTrellix, and Fidelity have launched (unpaid) vulnerability disclosure programs (VDPs).
  • Advertising platform developer and social media company Meta has released its inaugural ‘Bug Bulletin’, which includes details of some of the notable finds identified in its own, and in third-party, code.


Get More Stories Like This On: Facebook: @AllNaijaEntertainment, Twitter: @AllNaijaEntertainment

Snapchat enables parents to keep an eye on who their kids are messaging on the platform
Technology4 hours ago

Snapchat enables parents to keep an eye on who their kids are messaging on the platform

Former Super Eagles assistant coach takes over as manager of Danish team Jammerbugt
Sports4 hours ago

Former Super Eagles assistant coach takes over as manager of Danish team Jammerbugt

Alex Iwobi: "We were unfortunate" Everton can compete against any team
Sports4 hours ago

Alex Iwobi: “We were unfortunate” Everton can compete against any team

The DG exhorts NYSC members to accept postings in good faith
News4 hours ago

The DG exhorts NYSC members to accept postings in good faith

Students urge the FG once more to abide by the demands of ASUU
Education4 hours ago

Students urge the FG once more to abide by the demands of ASUU

IG orders a comprehensive review of the Intelligence Units and expresses displeasure with police brutality and extortion
News4 hours ago

IG orders a comprehensive review of the Intelligence Units and expresses displeasure with police brutality and extortion

Buhari celebrates Ngige as he turns 70
News5 hours ago

Buhari celebrates Ngige as he turns 70

News10 hours ago

Troops strike the Boko Haram commander and 27 others in Borno

Director of "Blood Sisters" Biyi Bandele passes away at 54
Entertainment10 hours ago

Director of “Blood Sisters” Biyi Bandele passes away at 54

Entertainment10 hours ago

Davido posts a screenshot of himself and Chioma on a video conversation with the caption, “My gist partner.”

Dame Olivia Newton-John, a star of Grease, passes away at age 73
Entertainment11 hours ago

Dame Olivia Newton-John, a star of Grease, passes away at age 73

The Comanche warrior paint's significance is explained by Prey star Amber Midthunder
Entertainment11 hours ago

The Comanche warrior paint’s significance is explained by Prey star Amber Midthunder

Hold Me Closer, a collaboration song between Britney Spears and Sir Elton John, making the singer's first single to be released since 2016
Entertainment11 hours ago

Hold Me Closer, a collaboration song between Britney Spears and Sir Elton John, making the singer’s first single to be released since 2016

Your daily horoscope for Monday, July 25, 2022
Horoscope11 hours ago

Your daily horoscope for Tuesday, August 9, 2022

BBNaija S7: Phyna, Bryann, Groovy, Ilebaye, and Khalid are up for eviction
Entertainment20 hours ago

BBNaija S7: Phyna, Bryann, Groovy, Ilebaye, and Khalid are up for eviction

Entertainment20 hours ago

“I’m sorry for all the embarrassment I’ve caused my wife, my kids, my mother and all our families,” – Two Face Idibia

How and when to view the best meteor shower of the year, the Perseids meteor shower, in 2022
Technology21 hours ago

How and when to view the best meteor shower of the year, the Perseids meteor shower, in 2022

Technology21 hours ago

Apple allegedly instructs suppliers to avoid labeling shipments to China with “Made in Taiwan”

Sports21 hours ago

Super Eagles hero celebrates Premier League accomplishment as “Dream Turns Reality”

Frenkie de Jong makes Chelsea transfer decision in phone call with Todd Boehly
Sports21 hours ago

Frenkie de Jong makes Chelsea transfer decision in phone call with Todd Boehly

News23 hours ago

Police re-arrest 25 other suspects and the escapee from Jos prison

News23 hours ago

Lagos policeman shoot and murder an ex-convict while battling with armed criminals

News23 hours ago

Cleaner received an eight-month sentence for stealing a laptop bag

Dariye and Nyame recover their freedom, 4 months after Buhari's pardon
News23 hours ago

Dariye and Nyame recover their freedom, 4 months after Buhari’s pardon

Education23 hours ago

BREAKING: WAEC announces the 2022 WASSCE results

"Buga" is a victory song for Nigerian medalists
Entertainment1 day ago

“Buga” is a victory song for Nigerian medalists

Kizz Daniel dazzles in a sold-out performance in Uganda
Entertainment1 day ago

Kizz Daniel dazzles in a sold-out performance in Uganda

After four years of marriage, Gideon Okeke's wife is getting a divorce
Entertainment1 day ago

After four years of marriage, Gideon Okeke’s wife is getting a divorce

Beauty's brother burns critics over disqualification: "Calm down, her script was wonderful."
Entertainment1 day ago

BBNaija S7: Beauty’s brother burns critics over disqualification: “Calm down, her script was wonderful.”

Your daily horoscope for Monday, July 25, 2022
Horoscope1 day ago

Your daily horoscope for Monday, August 8, 2022

BBNaija
Entertainment2 days ago

#BBNaija: Christy O, Cyph evicted

Lewandoski Pedri Gavi Barcelona vs Pumas Joan Gamper Trophy
Sports2 days ago

Deadly Barcelona Thrashed PUMAS to win trophy, Lewandoski gets debut goal

Erling Haaland Manchester City
Sports2 days ago

Reactions to Manchester City’s opening-game 2-0 victory over West Ham: “Erling Haaland is scary.”

Beauty BBNaija
Entertainment2 days ago

BBNaija S7: Beauty eliminated from reality TV show

Erik Ten Hag Manchester United vs Brighton
Sports2 days ago

Erik Ten Hag Chops First Breakfast as Man Utd Manager as Brighton Wins 2-1

Ronaldo
Sports2 days ago

Man Utd must let Ronaldo leave – Wayne Rooney

Scholarship Graduate
Education2 days ago

Australia Scholarship: Apply for Griffith University degree scholarship, 2022

Godwin Obaseki
Education2 days ago

Edo Govt To Recruit 1000 New Teachers, Train 650 Others

Airport
News2 days ago

Ebonyi Govt Laments Destruction Of Airport Fence

Isco
Sports2 days ago

Transfer: Real Madrid star, Isco to Sevilla as free agent

THE WITCH'S DAUGHTER story _ AllNaijaEntertainment
ANE Stories7 days ago

[STORY] THE WITCH’S DAUGHTER (Complete Episodes)

Money Over Love story _ AllNaijaEntertainment
ANE Stories7 days ago

[STORY] MONEY OVER LOVE (Complete Episodes)

WHAT MY ELDER BROTHER'S WIFE TAUGHT ME by Temi Akintade _ AllNaijaEntertainment
ANE Stories7 days ago

[STORY] WHAT MY ELDER BROTHER’S WIFE TAUGHT ME (Complete Episodes)

THE WITCH'S DAUGHTER story _ AllNaijaEntertainment
ANE Stories7 days ago

[STORY] THE WITCH’S DAUGHTER (Episode 07)

SADE'S HEART TALE
ANE Stories7 days ago

[STORY] SADE’S HEART TALE (Episode 19)

THE WITCH'S DAUGHTER story _ AllNaijaEntertainment
ANE Stories7 days ago

[STORY] THE WITCH’S DAUGHTER (Episode 03)

WHAT MY ELDER BROTHER'S WIFE TAUGHT ME by Temi Akintade _ AllNaijaEntertainment
ANE Stories7 days ago

[STORY] WHAT MY ELDER BROTHER’S WIFE TAUGHT ME (Episode 01)

Money Over Love story _ AllNaijaEntertainment
ANE Stories7 days ago

[STORY] MONEY OVER LOVE (Episode 01)

THE WITCH'S DAUGHTER story _ AllNaijaEntertainment
ANE Stories7 days ago

[STORY] THE WITCH’S DAUGHTER (Episode 01)

Money Over Love story _ AllNaijaEntertainment
ANE Stories7 days ago

[STORY] MONEY OVER LOVE (Episode 09)

Daniel Bachmann has won the race to start over Super Eagles goalkeeper Maduka Okoye for Watford this season
Sports5 days ago

Revealed: Why Watford goalkeeper Maduka Okoye was not included in the team on Monday

THE WITCH'S DAUGHTER story _ AllNaijaEntertainment
ANE Stories7 days ago

[STORY] THE WITCH’S DAUGHTER (Episode 05)

WHAT MY ELDER BROTHER'S WIFE TAUGHT ME by Temi Akintade _ AllNaijaEntertainment
ANE Stories7 days ago

[STORY] WHAT MY ELDER BROTHER’S WIFE TAUGHT ME (Final Episode 04)

THE WITCH'S DAUGHTER story _ AllNaijaEntertainment
ANE Stories7 days ago

[STORY] THE WITCH’S DAUGHTER (Episode 04)

WHAT MY ELDER BROTHER'S WIFE TAUGHT ME by Temi Akintade _ AllNaijaEntertainment
ANE Stories7 days ago

[STORY] WHAT MY ELDER BROTHER’S WIFE TAUGHT ME (Episode 02)

THE WITCH'S DAUGHTER story _ AllNaijaEntertainment
ANE Stories7 days ago

[STORY] THE WITCH’S DAUGHTER (Episode 06)

WHAT MY ELDER BROTHER'S WIFE TAUGHT ME by Temi Akintade _ AllNaijaEntertainment
ANE Stories7 days ago

[STORY] WHAT MY ELDER BROTHER’S WIFE TAUGHT ME (Episode 03)

Money Over Love story _ AllNaijaEntertainment
ANE Stories7 days ago

[STORY] MONEY OVER LOVE (Episode 04)

THE WITCH'S DAUGHTER story _ AllNaijaEntertainment
ANE Stories7 days ago

[STORY] THE WITCH’S DAUGHTER (Episode 02)

Money Over Love story _ AllNaijaEntertainment
ANE Stories7 days ago

[STORY] MONEY OVER LOVE (Episode 05)

Money Over Love story _ AllNaijaEntertainment
ANE Stories7 days ago

[STORY] MONEY OVER LOVE (Episode 03)

THE WITCH'S DAUGHTER story _ AllNaijaEntertainment
ANE Stories5 days ago

[STORY] THE WITCH’S DAUGHTER (Final Episode 09)

Money Over Love story _ AllNaijaEntertainment
ANE Stories7 days ago

[STORY] MONEY OVER LOVE (Episode 12)

Money Over Love story _ AllNaijaEntertainment
ANE Stories7 days ago

[STORY] MONEY OVER LOVE (Episode 08)

Money Over Love story _ AllNaijaEntertainment
ANE Stories7 days ago

[STORY] MONEY OVER LOVE (Episode 02)

Money Over Love story _ AllNaijaEntertainment
ANE Stories7 days ago

[STORY] MONEY OVER LOVE (Episode 06)

BBNaija S7: Amaka and Phyna bemoan the lack of condoms in the home
Entertainment6 days ago

BBNaija S7: Amaka and Phyna bemoan the lack of condoms in the home

Epic movie "Anikulapo" by Kunle Afolayan is scheduled to premiere in September
Entertainment7 days ago

Epic movie “Anikulapo” by Kunle Afolayan is scheduled to premiere in September

THE WITCH'S DAUGHTER story _ AllNaijaEntertainment
ANE Stories5 days ago

[STORY] THE WITCH’S DAUGHTER (Episode 08)

Money Over Love story _ AllNaijaEntertainment
ANE Stories7 days ago

[STORY] MONEY OVER LOVE (Episode 14)

Money Over Love story _ AllNaijaEntertainment
ANE Stories7 days ago

[STORY] MONEY OVER LOVE (Episode 11)

Nkem Owoh
Entertainment5 days ago

Nkem Owoh Breaks Silence On Claims He Rejected N10 Million To Endorse Bola Tinubu For President

Money Over Love story _ AllNaijaEntertainment
ANE Stories7 days ago

[STORY] MONEY OVER LOVE (Episode 17)

Money Over Love story _ AllNaijaEntertainment
ANE Stories7 days ago

[STORY] MONEY OVER LOVE (Episode 18)

Money Over Love story _ AllNaijaEntertainment
ANE Stories7 days ago

[STORY] MONEY OVER LOVE (Final Episode 20)

Money Over Love story _ AllNaijaEntertainment
ANE Stories7 days ago

[STORY] MONEY OVER LOVE (Episode 10)

Nancy Isime
Entertainment7 days ago

“Nancy Isime Did Butt Enlargement Surgery” – Blessing Okoro Makes Shocking Revelation

BBNaija S7: Denrele claims that bbnaija candidates send him n*des and millions of naira in order to take part in the show
Entertainment2 days ago

BBNaija S7: Denrele claims that bbnaija candidates send him n*des and millions of naira in order to take part in the show

Money Over Love story _ AllNaijaEntertainment
ANE Stories7 days ago

[STORY] MONEY OVER LOVE (Episode 19)

Money Over Love story _ AllNaijaEntertainment
ANE Stories7 days ago

[STORY] MONEY OVER LOVE (Episode 13)

ANE's Billboard Hots



Join "ANE sabi" clique

Don't miss a thing, get ogbonge ANE latest updates to fuel your conversation daily.