Annual testing starts to look a little dusty when... @Bugcrowd

Uploaded June 2026 | Updated September 2026, 3 hours ago

vulnerability discovery and exploit development can happen in under 10 hours. 🧹

Dave Gerry and David Brumley discuss why security teams need to move toward continuous validation, red teaming, and active adversary emulation in the age of AI.

Annual testing starts to look a little dusty when...

Log4Shell, The Worst Java Vulnerability in Years

100 criticals in one week? Great news. Also… a lot 😅

$Bugcrowd Security Flash: CVE-2025-55182 On December 3, 2025, the React Team disclosed a critical RCE vulnerability (CVE-2025-55182) affecting React Server Components in modern Next.js deployments. An unauthenticated attacker can trigger server-side remote code execution using a crafted HTTP request. More technical details will be available once the upstream patch rollout is complete. In this Bugcrowd Security Flash, Trey Ford and Matt Held outline what we know now, the potential impact, and what security teams should prioritize next. Stay informed as this vulnerability evolves. For ongoing updates, visit the Bugcrowd blog: https://www.bugcrowd.com/blog/cve-2025-55182-what-you-need-to-know-about-react2shell/?utm_campaign=security_flash&utm_source=youtube&utm_medium=organic_social&utm_content={TIMESTAMP_EPOCH}$ $Join this Q&A session! 📢 April 16 at 11 AM ET: https://www.bugcrowd.com/webinar/?commid=663767&bt_tok={{lead.Id}}&utm_source=youtube&utm_medium=organic_social Join Bugcrowd, CISA VDP, and public sector security leaders for a Q&A on the impact of FedRAMP Moderate authorization. Hear from Kent Wilson, Trey Ford, and Shondalyn Smith on what this means for vulnerability disclosure, operational rigor, and proactive security across government and beyond. 🎙️🔥$

Finding DOM XSS is like solving a puzzle

AI tools are already part of everyday work, approved or not. 🤷

Web cache deception [Spanish - English subtitles]

Bugcrowd |

Annual testing starts to look a little dusty when...