22 Jul 2026, 14:00 UTC37 views3 reactionsread 8 August 2026 Photo
Cloudy, with a chance of vulnerability showers π
K2 Cloud just opened its bug bounty program to every researcher.
You'll be hunting the critical high-impact bugs that put client infrastructure and data at risk π
In scope:
π RCE
π Injections (SQL, XML, SSTI, and others)
π LFI and RFI
π SSRF with confirmed impact
π IDOR and privilege escalation
π Authentication and authorization flaws
π Business logic and payment byβ¦
β€βπ₯1π1π₯1
15 Jul 2026, 14:40 UTC64 views6 reactionsread 8 August 2026 Photo
New bounties are now available on Standoff Bug Bounty π
Positive Technologies refreshed its whole lineup of bug hunting programs. Here's what's live π
πͺ² What changed:
β’ Positive Dream Hunting has a new unacceptable event
β’ Positive Bug Hunting has new terms
β’ PT Cloud AF is unchanged
π‘Here are the programs:
β’ MaxPatrol EDR
β’ MaxPatrol O2
β’ MaxPatrol SIEM
β’ MaxPatrol VM
β’ MaxPatrol 360
β’ PT Application Firewall
β’β¦
β€2β€βπ₯2π₯2
8 Jul 2026, 09:45 UTC79 views10 reactionsread 8 August 2026 Photo
T-Bank Ρyber evaluation program: a $655,738 reward pool π€
This is your chance to take on one of Russia's largest banks and test whether its infrastructure can withstand a real-world attack. Trigger a single non-tolerable event and earn up to $153,906.
Here's how to participate:
π‘ Apply for the program.
π‘ Receive an invite and gain access to the cyber evaluation environment.
π‘ Trigger a non-tolerable event.
The T-Bβ¦
β€4β€βπ₯3π₯3
8 May 2026, 11:02 UTC125 views6 reactionsread 8 August 2026 Photo
BCS Bank is back on Standoff Bug Bounty π
The program is open to all bug hunters. If you've been eyeing a bank scope, now's a good time to jump in.
Current payouts:
βΆοΈ Critical, up to $3,350
βΆοΈ High, up to $1,610
βΆοΈ Medium, up to $670
βΆοΈ Low, up to $135
βΆοΈ Info, no reward
Scope:
π΅ https://bcs-bank.ru/
π΅ https://lk.bcs-bank.ru/
π΅ *.bcs-bank.ru
π΅ Android and iOS apps (latest versions from bcs.ru)
BCS Bank's attack β¦
β€2β€βπ₯2π₯2
6 May 2026, 14:20 UTC105 views6 reactionsread 8 August 2026 Video
That's us at Hacks. Back home now π
The event's over, but the energy's sticking with us.
Here's a little video from day two so you can get a taste of itβthe buzz, the drive, and the community.
See you at the next Hacks. New location, same electric vibe π
β€2β€βπ₯2π₯2
28 Apr 2026, 15:30 UTC138 views7 reactionsread 8 August 2026 Photo
Standoff Hacks Finals π₯
Π’ΠΎΡ 3:
π₯ r0hack β MVP Standoff Hacks
π₯ freeman
π₯ BlackFan
MVPs by program:
π BlackFan β T-Bank
π brain β VK
π hussein98d β Jet Infosystems
π Antart β Bitrix24
30 top bug hunters
350+ reports
$300K+ in bounties
Two weeks of high-intensity work: hundreds of submissions, rigorous triage, and real-world impact.
Huge thanks to every researcher who kept the pace all the way to the finals.
The β¦
π₯3β€2β€βπ₯2
16 Mar 2026, 09:00 UTC171 viewsread 8 August 2026 Photo
Standoff Bug Bounty 2025 wrapped. Here's what the numbers say π€
We packed every payout, every vulnerability class, and every trend from the past year into a single report. The team combed through the platform and highlighted standout items, extending from researcher earnings, most common vulnerability types, all the way to where bug bounty is headed the rest of this year. We included tables and charts for clarity.
β¦
10 Mar 2026, 15:00 UTC141 views9 reactionsread 8 August 2026 Photo
Kontur double payouts are live π€
From March 2 through March 31, qualifying bugs come with double payouts. This round targets the authentication system and account portal. Rewards for eligible vulnerabilities can reach $25,285.
In scope:
auth.kontur.ru
identity.kontur.ru
cabinet.kontur.ru
api.kontur.ru/cabinet-api/*
api.kontur.ru/auth/*
Good to know:
γ°οΈ Higher payouts apply only to the listed scope
γ°οΈ Limit automatβ¦
β€3β€βπ₯3π₯3
5 Mar 2026, 14:00 UTC124 views6 reactionsread 8 August 2026 Photo
βοΈ New message for you: hh.ru goes public on Standoff Bug Bounty
Your dream job just landed βbugs and bounties are already waiting for you on the career platform.
The program was previously open to a select group of researchers, but now hh.ru is opening its doors to every bug hunter out there.
Earn up to $6,414 for discovered vulnerabilities π°
What's in scope:
β’ hh.ru
β’ api.hh.ru
β’ dev.hh.ru
β’ talantix.ru
β’ setkaβ¦
β€2β€βπ₯2π₯2
27 Feb 2026, 09:00 UTC111 views7 reactionsread 8 August 2026 Photo
What is Standoff Hacks and how do you get in? π€
We sat down with one of our researchers, Hackerx007, to find out what participating in Standoff Hacks means to him. Dive into the amazing world of Standoff Hacks and explore it with us!
Read the interview, then join the contest for a chance to win an invite to a party abroad π
1β£ What does participating in Standoff Hacks mean to you?
A lot! It allows me to challenge β¦
π₯3β€βπ₯2π2
20 Feb 2026, 07:00 UTC131 views14 reactionsread 8 August 2026 Photo
Standoff Hacks is almost here π
Standoff Hacks is back, and it's right around the corner. If this is your first time, below is the rundown.
It's a closed, live-hacking event where top researchers spend two weeks hacking their way through exclusive corporate environments π
Here's what awaits:
β‘οΈ Lots of bugs.
β‘οΈ Outstanding rewards.
β‘οΈ A wrap-up that'll be lit!
Here's how the contest works:
β‘οΈ International Standoβ¦
β€6β€βπ₯4π₯4
9 Feb 2026, 07:00 UTC142 views5 reactionsread 8 August 2026 Photo
New cyber testing program from Jet Infosystems β€οΈ
You can now test one of the most complex enterprise infrastructures out there, and see how it holds up under pressure β€οΈ
Key scenarios include:
π΅ Infrastructure control
Domain administrator rights
Virtualization access
Server and backup management control
π΅ Protected privileged access perimeter access
Isolation bypass
Perimeter movement
Protected perimeter network cβ¦
β€2π2π₯°1
Showing the 12 most recent of 16 posts we hold for @standoff_bugbounty_world. View and reaction counts are the latest single reading for each post, not a live figure, and a recent post is still accumulating both. A view count marked β was rounded by Telegram before we ever saw it β t.me prints views in full below 1,000 and to three significant figures above, so β1,200,000 means somewhere between 1,150,000 and 1,249,999. Unmarked counts are exact. Text is reproduced from the public post preview and truncated for length.
