{"id":5093,"date":"2023-07-05T17:34:06","date_gmt":"2023-07-05T17:34:06","guid":{"rendered":"\/2023-portland\/?post_type=agenda-item&p=5093"},"modified":"2023-07-05T17:34:25","modified_gmt":"2023-07-05T17:34:25","slug":"when-a-hacker-comes-knocking-vulnerability-disclosure-bug-bounties-and-pci","status":"publish","type":"agenda-item","link":"https:\/\/events.pcisecuritystandards.org\/2023-portland\/agenda-item\/when-a-hacker-comes-knocking-vulnerability-disclosure-bug-bounties-and-pci\/","title":{"rendered":"When a Hacker Comes Knocking: Vulnerability Disclosure, Bug Bounties, and PCI"},"content":{"rendered":"

A hacker contacts your organization. They say they have found a major vulnerability in your software. What should you do? Are you under attack? What if the hacker asks for a \u201cdonation\u201d? Vulnerability disclosure policies (VDP) and processes are increasingly built into regulations and standards, including PCI DSS v4.0. This presentation will provide an overview of vulnerability disclosure best practices, differences between VDP and bug bounties, and how these practices fit within PCI DSS v4.0 compliance.<\/p>\n","protected":false},"featured_media":0,"template":"","meta":{"_acf_changed":false,"_links_to":"","_links_to_target":""},"class_list":["post-5093","agenda-item","type-agenda-item","status-publish","hentry"],"acf":[],"yoast_head":"\nWhen a Hacker Comes Knocking: Vulnerability Disclosure, Bug Bounties, and PCI - 2023 North America Community Meeting<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/events.pcisecuritystandards.org\/2023-portland\/agenda-item\/when-a-hacker-comes-knocking-vulnerability-disclosure-bug-bounties-and-pci\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"When a Hacker Comes Knocking: Vulnerability Disclosure, Bug Bounties, and PCI - 2023 North America Community Meeting\" \/>\n<meta property=\"og:description\" content=\"A hacker contacts your organization. They say they have found a major vulnerability in your software. What should you do? Are you under attack? What if the hacker asks for a \u201cdonation\u201d? Vulnerability disclosure policies (VDP) and processes are increasingly built into regulations and standards, including PCI DSS v4.0. This presentation will provide an overview [...]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/events.pcisecuritystandards.org\/2023-portland\/agenda-item\/when-a-hacker-comes-knocking-vulnerability-disclosure-bug-bounties-and-pci\/\" \/>\n<meta property=\"og:site_name\" content=\"2023 North America Community Meeting\" \/>\n<meta property=\"article:modified_time\" content=\"2023-07-05T17:34:25+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/events.pcisecuritystandards.org\/2023-portland\/wp-content\/uploads\/sites\/68\/2021\/06\/Website-Social-Share_1200x627.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"627\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/events.pcisecuritystandards.org\\\/2023-portland\\\/agenda-item\\\/when-a-hacker-comes-knocking-vulnerability-disclosure-bug-bounties-and-pci\\\/\",\"url\":\"https:\\\/\\\/events.pcisecuritystandards.org\\\/2023-portland\\\/agenda-item\\\/when-a-hacker-comes-knocking-vulnerability-disclosure-bug-bounties-and-pci\\\/\",\"name\":\"When a Hacker Comes Knocking: Vulnerability Disclosure, Bug Bounties, and PCI - 2023 North America Community Meeting\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/events.pcisecuritystandards.org\\\/2023-portland\\\/#website\"},\"datePublished\":\"2023-07-05T17:34:06+00:00\",\"dateModified\":\"2023-07-05T17:34:25+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/events.pcisecuritystandards.org\\\/2023-portland\\\/agenda-item\\\/when-a-hacker-comes-knocking-vulnerability-disclosure-bug-bounties-and-pci\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/events.pcisecuritystandards.org\\\/2023-portland\\\/agenda-item\\\/when-a-hacker-comes-knocking-vulnerability-disclosure-bug-bounties-and-pci\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/events.pcisecuritystandards.org\\\/2023-portland\\\/agenda-item\\\/when-a-hacker-comes-knocking-vulnerability-disclosure-bug-bounties-and-pci\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/events.pcisecuritystandards.org\\\/2023-portland\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"When a Hacker Comes Knocking: Vulnerability Disclosure, Bug Bounties, and PCI\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/events.pcisecuritystandards.org\\\/2023-portland\\\/#website\",\"url\":\"https:\\\/\\\/events.pcisecuritystandards.org\\\/2023-portland\\\/\",\"name\":\"2023 North America Community Meeting\",\"description\":\"PCI SSC Global Community Forum\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/events.pcisecuritystandards.org\\\/2023-portland\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"When a Hacker Comes Knocking: Vulnerability Disclosure, Bug Bounties, and PCI - 2023 North America Community Meeting","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/events.pcisecuritystandards.org\/2023-portland\/agenda-item\/when-a-hacker-comes-knocking-vulnerability-disclosure-bug-bounties-and-pci\/","og_locale":"en_US","og_type":"article","og_title":"When a Hacker Comes Knocking: Vulnerability Disclosure, Bug Bounties, and PCI - 2023 North America Community Meeting","og_description":"A hacker contacts your organization. They say they have found a major vulnerability in your software. What should you do? Are you under attack? What if the hacker asks for a \u201cdonation\u201d? Vulnerability disclosure policies (VDP) and processes are increasingly built into regulations and standards, including PCI DSS v4.0. This presentation will provide an overview [...]","og_url":"https:\/\/events.pcisecuritystandards.org\/2023-portland\/agenda-item\/when-a-hacker-comes-knocking-vulnerability-disclosure-bug-bounties-and-pci\/","og_site_name":"2023 North America Community Meeting","article_modified_time":"2023-07-05T17:34:25+00:00","og_image":[{"width":1200,"height":627,"url":"https:\/\/events.pcisecuritystandards.org\/2023-portland\/wp-content\/uploads\/sites\/68\/2021\/06\/Website-Social-Share_1200x627.png","type":"image\/png"}],"twitter_card":"summary_large_image","schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/events.pcisecuritystandards.org\/2023-portland\/agenda-item\/when-a-hacker-comes-knocking-vulnerability-disclosure-bug-bounties-and-pci\/","url":"https:\/\/events.pcisecuritystandards.org\/2023-portland\/agenda-item\/when-a-hacker-comes-knocking-vulnerability-disclosure-bug-bounties-and-pci\/","name":"When a Hacker Comes Knocking: Vulnerability Disclosure, Bug Bounties, and PCI - 2023 North America Community Meeting","isPartOf":{"@id":"https:\/\/events.pcisecuritystandards.org\/2023-portland\/#website"},"datePublished":"2023-07-05T17:34:06+00:00","dateModified":"2023-07-05T17:34:25+00:00","breadcrumb":{"@id":"https:\/\/events.pcisecuritystandards.org\/2023-portland\/agenda-item\/when-a-hacker-comes-knocking-vulnerability-disclosure-bug-bounties-and-pci\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/events.pcisecuritystandards.org\/2023-portland\/agenda-item\/when-a-hacker-comes-knocking-vulnerability-disclosure-bug-bounties-and-pci\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/events.pcisecuritystandards.org\/2023-portland\/agenda-item\/when-a-hacker-comes-knocking-vulnerability-disclosure-bug-bounties-and-pci\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/events.pcisecuritystandards.org\/2023-portland\/"},{"@type":"ListItem","position":2,"name":"When a Hacker Comes Knocking: Vulnerability Disclosure, Bug Bounties, and PCI"}]},{"@type":"WebSite","@id":"https:\/\/events.pcisecuritystandards.org\/2023-portland\/#website","url":"https:\/\/events.pcisecuritystandards.org\/2023-portland\/","name":"2023 North America Community Meeting","description":"PCI SSC Global Community Forum","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/events.pcisecuritystandards.org\/2023-portland\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"}]}},"_links":{"self":[{"href":"https:\/\/events.pcisecuritystandards.org\/2023-portland\/wp-json\/wp\/v2\/agenda-item\/5093","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/events.pcisecuritystandards.org\/2023-portland\/wp-json\/wp\/v2\/agenda-item"}],"about":[{"href":"https:\/\/events.pcisecuritystandards.org\/2023-portland\/wp-json\/wp\/v2\/types\/agenda-item"}],"wp:attachment":[{"href":"https:\/\/events.pcisecuritystandards.org\/2023-portland\/wp-json\/wp\/v2\/media?parent=5093"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}