coordinated disclosure – WindowsTechs.com

Facebook Debuts Third-Party Vulnerability Disclosure Policy

Posted on September 4, 2020 by Tara Seals

If the social-media behemoth finds a bug in another platform’s code, the project has 90 days to remediate before Facebook goes public. Continue reading Facebook Debuts Third-Party Vulnerability Disclosure Policy→

Google Ditches Patch-Time Bug Disclosure in Favor of 90-Day Policy

Posted on January 8, 2020 by Tara Seals

Project Zero vulnerability disclosures will now happen at 90 days, even if a patch becomes available before then. Continue reading Google Ditches Patch-Time Bug Disclosure in Favor of 90-Day Policy→

Bug Hunters Prefer Communication Over Compensation

Posted on December 15, 2016 by Michael Mimoso

Results of a NTIA survey published today show that researchers prefer open communication with vendors over financial compensation when it comes to vulnerability disclosure. Continue reading Bug Hunters Prefer Communication Over Compensation→

St. Jude Alleges False Claims, Stock Manipulation in Suit Against Med Sec, Muddy Waters

Posted on September 7, 2016 by Michael Mimoso

St. Jude Medical yesterday filed a lawsuit alleging that Muddy Waters and Med Sec made false claims and attempted to manipulate St. Jude stock. Continue reading St. Jude Alleges False Claims, Stock Manipulation in Suit Against Med Sec, Muddy Waters→