News

Positive Technologies analyzed the largest and most active bug bounty platforms across the globe. The highest demand for services of bug bounty platforms was observed in the following sectors: IT (16%), online services (14%), services (13%), trade (11%), and finance (9%). This global trend largely correlates with the situation in the Russian market. Russian bug bounty programs are mostly used by private businesses serving a large number of customers. Some examples of such businesses are banks, online services, e-commerce players, and IT vendors. Public sector and critical infrastructure organizations could become the main driver of bug bounty initiatives.

On November 22–24, 2022, white-hat hackers and infosec experts will convene once again at the Standoff open cyberbattle. For the tenth time, the infrastructure of the virtual State F will come under a barrage of hacker attacks, while infosec experts will uncover flaws in the infrastructure and figure out how hackers might break in. The event will be streamed live online at standoff365.com.

Positive Technologies expert Nikita Abramov found a vulnerability in the ASUSTOR Data Master (ADM) operating system for managing network-attached storage (NAS) devices. It allowed an intruder to remotely execute arbitrary code in the operating system of NAS devices.

Positive Technologies has released PT Sandbox 4.3. The main feature of the new release is bootkit detection. Bootkits are a stealthy type of malware that is gaining traction among cybercriminals.

Positive Technologies has analyzed the cyberthreats of Q2 2022: ransomware activity increased by 65% against the previous quarter, attacks on industry were up 53%, while the number of attacks on transport almost doubled. Cryptocurrencies and crypto investments also attracted more interest from cybercriminals.

Starting with PT ISIM 4.1, the mechanism for getting expertise from the cloud has been updated

Mitsubishi eliminated the vulnerabilities in a firmware update.

According to a new study by Positive Technologies, the number of attacks on retail more than doubled from 2018–2019 to 2020–2021. Most attacks were targeted at services and customers.

VK has launched a bug bounty program on The Standoff 365 Bug Bounty, a platform developed by Positive Technologies for uncovering vulnerabilities. A bug bounty program offers rewards to outside researchers for discovering and reporting security flaws before attackers can find and exploit them.