The Defense Department has chosen HackerOne and Synack to create a contract vehicle that will work to help DoD components and services launch “bug bounty” programs. DoD said Thursday the contract vehicle will facilitate efforts to standardize a crowdsourced approach to digital security through challenges designed to identify and address vulnerabilities on department-run websites. The department seeks to launch additional challenges similar to the Hack the […] More

Constantine Saab, managing director and chief technology officer at Valor Equity Partners, has joined the advisory board of Peraton. Saab, an 18-year CIA veteran, will provide strategic counsel to Peraton's senior leadership team on shaping the company's business goals and objectives, the company said Thursday.

More

Building a public sector product pipeline requires understanding priorities in the short and long term, said Barry Duplantis, public sector general manager at collaboration platform Mattermost. In an interview on the Sales Game Changers Podcast, Duplantis explained the importance of security and other challenges in selling novel technology to government customers.

More

The Department of Defense’s Cyber Crime Center has begun a pilot program to allow hackers to share the vulnerabilities they find in systems operated by companies in the defense industrial base, Nextgov reported Monday. The Defense Industrial Base Vulnerability Disclosure Program Pilot "received numerous applicants,” a spokesperson for DC3 told Nextgov. “However, during this initial launch pilot, we will be moving forward with a few dozen” defense contractors.

More

Industry executives interviewed at Black Hat USA cybersecurity conference in Las Vegas said government agencies need to have more visibility into their networks in order to protect their infrastructure from cyber threats, Fifth Domain reported Friday.

More

Brian Neely, chief information officer and chief information security officer for American Systems, said the company is looking forward to applying the crowdsourced security testing model to its third-party testing portfolio.

More

A coalition of security companies and advocacy groups has called on the National Institute of Standards and Technology to incorporate best practices on digital vulnerability disclosures into the agency’s updated Cybersecurity Framework, Nextgov reported Tuesday. Joseph Marks writes the consortium urged NIST to add a section on procedures to receive, review and respond to vulnerability reports. NIST sought public feedback on version […] More

Redwood City, California-based security company Synack has secured a $2 million contract to help the Internal Revenue Service for the development of a pioneer model to protect government and taxpayer data. The IRS awarded the sole-source contract after the agency conducted a thorough market research into the crowdsourced security market and a trial of Synack’s security testing platform, […] More