An RFC that helps organisations define security policies by @EdOverflow & @nightwatchcyber. 👉 https://xitter.cf/t.co/KktAVPg8PH 📖 https://xitter.cf/t.co/LVpnsiLQNZ
/.well-known/
Joined November 2015
- Tweets211
- Following19
- Followers2.7K
- Likes190
security.txt (RFC 9116) retweeted
🚨 BREAKING 🚨
Our @securitytxt 2024 version is updated containing a new CTF-like challenge. Check it out now: swisscom.ch/.well-known/secu…
security.txt (RFC 9116) retweeted
This is probably the best public Vulnerability Disclosure Program terms I've ever seen. It demonstrates the exact nature of a VDP, "see something, say something" no more, no less. +10 for hosting a @securitytxt file too. Nice work @ServiceNow 👏
security.txt (RFC 9116) retweeted
Looking for a little project to keep you busy on the weekend? I was just thinking: how many of the breached websites in @haveibeenpwned now have a security.txt file? So, if you feel like grabbing those domains and querying them all, there's an API here: haveibeenpwned.com/API/v3#Al…
security.txt (RFC 9116) retweeted
Switzerland's largest retail company @migros published their vulnerability disclosure policy via @securitytxt 🥳
security.txt (RFC 9116) retweeted
This is great: having a security.txt file is now mandatory for Dutch government websites. They either need to apply this as a standard or provide a good justification for why they're not using it ("Apply of Explain") digitaltrustcenter.nl/nieuws…
security.txt (RFC 9116) retweeted
security.txt 📑 has been added to the 'Comply or Explain' list of the Netherlands Standardisation Forum. This means that Dutch municipalities, provinces, the state, water boards and all operational organisations are obliged to apply this open standard.✅forumstandaardisatie.nl/nieu…
security.txt (RFC 9116) retweeted
@securitytxt nice recommendation for security.txt in this @CISAgov advisory cisa.gov/news-events/cyberse…
security.txt (RFC 9116) retweeted
Can you spare an hour to help us improve rfc-editor.org (the official home of RFCs)? If you’ve used RFCs for work, school or research, we’d love to learn from you - particularly if you're new here! Volunteer by answering a few quick questions: docs.google.com/forms/d/e/1F…
security.txt (RFC 9116) retweeted
A tale of Google dorks finding subdomain takeovers plus why having a security.txt & a responsive security team are good news all round. London Councils & pirate books. Google dorking for subdomain takeovers. Thanks to our @OPSEC_failed
pentestpartners.com/security…
#cybersecuritytips
security.txt (RFC 9116) retweeted
Check out the just released fresh version of Internet.nl with improved tests for CSP and security.txt, en.internet.nl/article/relea…
Happy testing and improving!
#moderninternet
ALT Screenshot news item Internet.nl
security.txt (RFC 9116) retweeted
What can we say, twitter-driven development sometimes works :)
netflix.com/.well-known/secu…
Ya'll are good folks. Keep it going!
security.txt (RFC 9116) retweeted
The New York Times wants to encourage users to report security vulnerabilities and bugs. Our colleague, @NickLeghorn, walks us through a history of reporting vulnerabilities and how The Cyber Security team has helped to resolve this. open.nytimes.com/making-repo…
security.txt (RFC 9116) retweeted
A fresh @securitytxt was published on swisscom.ch/.well-known/secu… (including a new challenge 🤓)
security.txt (RFC 9116) retweeted
We have updated our Vulnerability Disclosure Toolkit ❗
Our Toolkit contains the essential components needed to set up your own vulnerability disclosure process with helpful information on how to implement the systems.
Download the toolkit here 👇
ncsc.gov.uk/information/vuln…
security.txt (RFC 9116) retweeted
It was a pleasure presenting with @jschreuder and @DTC_NL at @OneConferenceNL. The work they are doing to promote security.txt in the Netherlands is amazing.
You can read more about their work here: digitaltrustcenter.nl/securi….
This Post is from an account that no longer exists. Learn more
security.txt (RFC 9116) retweeted
The Netherlands Standardisation Forum is currently reviewing whether the security.txt standard is suitable to become mandatory for the government via inclusion on the 'comply or explain' list.The expected result will be in spring 2023✍
security.txt (RFC 9116) retweeted
Where can ethical hackers report vulnerabilities at your organization? Publish a security.txt file and test it with Internet․nl.
Check the new @securitytxt test: en.internet.nl/article/secur…
@DTC_NL @AlertOnline #cybersecuritymonth
ALT Picture with green check mark and text "security.txt"
security.txt (RFC 9116) retweeted
"Optus if your [sic] reading we would have reported exploit if you had method to contact. No security mail, no bug bountys, no way too message." Notifications are hard. Security.txt, anyone? krebsonsecurity.com/2021/09/…
security.txt (RFC 9116) retweeted
Last week, during SECCON NL, Zerocopter and @DTC_NL presented the importance of having a Security.txt. And to make the implementation even easier, we have created the Security.txt Wizard tool to help you create one! Check it out here: zerocopter.com/blog-en/why-i…
security.txt (RFC 9116) retweeted
Just stumbled upon my first EVER hit on /.well-known/security.txt for finding a contact to do #responsibledisclosure!