Editor's Picks

Best Talks at Bug Bounty Village @ DEF CON 33

Hand-picked from in-depth reviewer verdicts — the top 5 talks from this conference. Skip the noise, find the signal.

← All talks at Bug Bounty Village @ DEF CON 33

  1. 1

    To Pay or Not to Pay? The Battle Between Bug Bounty & VDPs

    Aaron Guzman

    In "To Pay or Not to Pay? The Battle Between Bug Bounty & VDPs," Aaron Guzman, a Program Owner at Cisco, delves into the intricate challenges and strategic imperatives of managing both bug bounty (BB) and vulnerability disclosure programs (VDPs) within a large enterprise. The…

    0 Dr. Zero SOLID ★★★☆☆ H Heather Calloway SOLID ★★★☆☆
  2. 2

    Testing Trust Relationships: Breaking Network Boundaries

    Michael Gianarakis

    In his talk at Bug Bounty Village, Michael Gianarakis, Chief Product Officer at Searchlight and co-founder of Assetnote, presented a critical analysis of modern network access controls, particularly **IP whitelisting**, in the context of cloud and zero-trust architectures. The…

    0 Dr. Zero SOLID ★★★☆☆ H Heather Calloway SOLID ★★★☆☆
  3. 3

    KEYNOTE: Attacking AI

    Jason Haddix

    In this keynote at Bug Bounty Village, Jason Haddix, a seasoned offensive security expert and leader at Arcane, delves into the rapidly evolving landscape of attacking **Generative AI**-powered applications. With the proliferation of AI features across web applications, APIs…

    0 Dr. Zero SOLID ★★★☆☆ H Heather Calloway SOLID ★★★☆☆
  4. 4

    Inside a large self-hosted VRP

    Sam Erb

    Sam Erb, a Security Engineer at Google who helps manage the expansive Google and Alphabet Vulnerability Reward Program (VRP), delivered an insightful talk at Bug Bounty Village detailing the unique operational philosophies of a large, self-hosted VRP. Beyond offering a rare…

    0 Dr. Zero STRONG ACCEPT ★★★★☆ H Heather Calloway WEAK ★★☆☆☆
  5. 5

    Year of the Bounty Desktop: Bugs From Binaries

    Parsia Hakimian

    In "Year of the Bounty Desktop: Bugs From Binaries," Parsia Hakimian of Microsoft challenges the conventional focus of bug bounty hunting, urging researchers to look beyond traditional web applications and explore the often-overlooked attack surface of desktop applications…

    0 Dr. Zero SOLID ★★★☆☆ H Heather Calloway WEAK ★★☆☆☆