There’s no best way to handle disclosure of zero-day vulnerabilities

Earlier this week, the headlines flashed with news that Google had disclosed a vulnerability to Microsoft that allows local privilege escalation in Windows 10. This vulnerability is a zero-day, meaning these vulnerabilities did not have an immediate fix, and by making these vulnerabilities public, theoretically an attacker could take advantage of this information and use the […] Continue reading There’s no best way to handle disclosure of zero-day vulnerabilities