Tumar.One is a sponsor at Jeanne d'Hack CTF π«π·
Tumar.One is heading to France as an official sponsor of the 3rd edition of Jeanne dβHack CTF. We are proud to support this international event bringing together the brightest minds to solve complex security challenges.
Taking place January 30th in Rouen, this Jeopardy-style CTF is a premier gathering for testing technical depth in Web, Pwn, Crypto, and Reverse Engineering. CTF skills are the foundation of professional bug hunting; the persistence required to capture a flag is the same drive needed to secure global ecosystems. Our mission is to help researchers transition from simulated challenges to real-world security impact.
Check out the event and start your hunt:
Jeanne d'Hack CTF
Tumar.One is heading to France as an official sponsor of the 3rd edition of Jeanne dβHack CTF. We are proud to support this international event bringing together the brightest minds to solve complex security challenges.
Taking place January 30th in Rouen, this Jeopardy-style CTF is a premier gathering for testing technical depth in Web, Pwn, Crypto, and Reverse Engineering. CTF skills are the foundation of professional bug hunting; the persistence required to capture a flag is the same drive needed to secure global ecosystems. Our mission is to help researchers transition from simulated challenges to real-world security impact.
Check out the event and start your hunt:
Jeanne d'Hack CTF
π₯11β€3π2π1π€―1π©1π³1
Fresh Scope, Fresh Finds
February is officially in full swing β hope youβre fully locked in and back in the game. Perfect timing, because MBank updated their scope π
+3 mobile apps
+16 new web targets
Send your reports at Tumar.One!
February is officially in full swing β hope youβre fully locked in and back in the game. Perfect timing, because MBank updated their scope π
+3 mobile apps
+16 new web targets
Send your reports at Tumar.One!
π₯16β€βπ₯6β€2π2
π Think you've reached peak bug hunting?
The Akimat of the Ulytau District just went public β and the scope is now open for all bughunters. See you at the top.
Good luck :)
The Akimat of the Ulytau District just went public β and the scope is now open for all bughunters. See you at the top.
Good luck :)
π₯9π3β€2π€‘2π―2β€βπ₯1
New Program Launch: Freedom Telecom Operations
We are pleased to welcome Freedom Telecom Operations to the Tumar.One platform.
Freedom Telecom Operations is a telecommunications operator developing high-speed connectivity and public Wi-Fi infrastructure across major cities in Kazakhstan. By launching a Bug Bounty program, the company is strengthening its proactive approach to cybersecurity and the protection of its digital services.
We are pleased to welcome Freedom Telecom Operations to the Tumar.One platform.
Freedom Telecom Operations is a telecommunications operator developing high-speed connectivity and public Wi-Fi infrastructure across major cities in Kazakhstan. By launching a Bug Bounty program, the company is strengthening its proactive approach to cybersecurity and the protection of its digital services.
π₯9π€―3β€2
πΈ Spring is here β and with it, a new chapter.
The sun is out, the birds are singing, and we're celebrating the Top 3 of 2026 Season 2.
π₯ nov3mber
π₯ m0rse
π₯ t0x4
Congratulations to all three β you earned it!
And to the rest of the community: good luck in Season 3, running Apr β Jun 2026.
π Start now
The sun is out, the birds are singing, and we're celebrating the Top 3 of 2026 Season 2.
π₯ nov3mber
π₯ m0rse
π₯ t0x4
Congratulations to all three β you earned it!
And to the rest of the community: good luck in Season 3, running Apr β Jun 2026.
π Start now
π₯6β€5β€βπ₯2π2
New Program Launch: National Center of Expertise
We are pleased to welcome the National Center of Expertise to the Tumar.One.
The NCE is a national public health authority under the Committee of Sanitary and Epidemiological Control of the Ministry of Health of the Republic of Kazakhstan. It ensures the sanitary and epidemiological welfare of the population through laboratory research, environmental factor measurements, disinfection services, and professional training programs.
The program reflects NCE's commitment to protecting the digital systems that serve its public health mission.
π Start Now
We are pleased to welcome the National Center of Expertise to the Tumar.One.
The NCE is a national public health authority under the Committee of Sanitary and Epidemiological Control of the Ministry of Health of the Republic of Kazakhstan. It ensures the sanitary and epidemiological welfare of the population through laboratory research, environmental factor measurements, disinfection services, and professional training programs.
The program reflects NCE's commitment to protecting the digital systems that serve its public health mission.
π Start Now
π₯8πΎ7β€2
β¨ Bughunter profile update is here!
Your Tumar.One profile is no longer just an account β it's your public bug bounty portfolio. Think of it as a CV you can actually show off.
Fill it in, share it around, and let your skills speak for themselves.
Update your profile now!
Your Tumar.One profile is no longer just an account β it's your public bug bounty portfolio. Think of it as a CV you can actually show off.
Fill it in, share it around, and let your skills speak for themselves.
Update your profile now!
π₯10β€4π2
The Department of Digital Technologies of the Aktobe Region has joined Tumar.One.
The Department is a state body of the Republic of Kazakhstan responsible for leadership in informatization, digitalization, communications, and access to information across the Aktobe region, with a mission to accelerate economic development, improve the quality of life of the population through digital technologies, and lay the groundwork for Kazakhstan's transition to a digital economy.
With this program, the Department reinforces its approach to cybersecurity across the region's digital services.
π Start Now
The Department is a state body of the Republic of Kazakhstan responsible for leadership in informatization, digitalization, communications, and access to information across the Aktobe region, with a mission to accelerate economic development, improve the quality of life of the population through digital technologies, and lay the groundwork for Kazakhstan's transition to a digital economy.
With this program, the Department reinforces its approach to cybersecurity across the region's digital services.
π Start Now
π9π₯4β€βπ₯3π1
One day, vibe coders will learn not to push .env files. Until then - we'll keep the stats coming.
Over the past month, we analyzed a large number of reports from the Kazakhstan internet segment and spotted some clear trends we'll now be sharing regularly. And, oh boy, the majority of critical issues come not from sophisticated cyberattacks, but from basic negligence during development and server configuration.
The full breakdown β top vulnerability categories, examples, and a developer checklist β is in the cards above. π
Remember, cyber hygiene is not a one-time campaign, but a continuous process.
Stay safe and stay tuned with tumar.one.
Over the past month, we analyzed a large number of reports from the Kazakhstan internet segment and spotted some clear trends we'll now be sharing regularly. And, oh boy, the majority of critical issues come not from sophisticated cyberattacks, but from basic negligence during development and server configuration.
The full breakdown β top vulnerability categories, examples, and a developer checklist β is in the cards above. π
Remember, cyber hygiene is not a one-time campaign, but a continuous process.
Stay safe and stay tuned with tumar.one.
β€βπ₯5π4π2π₯1π1
Please open Telegram to view this post
VIEW IN TELEGRAM
π₯7π6β€βπ₯2β€1π1π1π1π»1π1
QazNet Monthly Cyber Threat Analytics Digest: April Edition
April had it all β .env files in web roots, debug modes left on in prod, open database dumps.
Month two, pattern holds β critical incidents rooted not in zero-days, but in configurations that should have been locked down on day one. This month we're also adding two new sections: a breakdown of critical cases and a bug hunter checklist β both in the cards above. π
π As always, stay tuned with tumar.one.
April had it all β .env files in web roots, debug modes left on in prod, open database dumps.
Month two, pattern holds β critical incidents rooted not in zero-days, but in configurations that should have been locked down on day one. This month we're also adding two new sections: a breakdown of critical cases and a bug hunter checklist β both in the cards above. π
Please open Telegram to view this post
VIEW IN TELEGRAM
Please open Telegram to view this post
VIEW IN TELEGRAM
π5π₯3β€βπ₯2β€1π1