Responsible disclosure: CodeCov CEO & CTO share learnings from the breach

Security Researcher Discovers Critical Data Vulnerability in Sports Insurer Portal, Faces Legal Threats Instead of Cooperation

A diving instructor and platform engineer discovers a critical security vulnerability in a sports insurer's portal during a dive trip, expos

Why the 90-day responsible disclosure policy is obsolete in the age of LLMs

The article argues that the traditional 90-day responsible disclosure window for security vulnerabilities is obsolete in the age of LLMs. Th

Establishing Best Practices For Effective Responsible Disclosure Channels

Microsoft calls for coordinated vulnerability disclosure after zero-day disclosures put customers at risk

Microsoft addresses the recent public disclosure of zero-day vulnerabilities that were not shared with the company beforehand, putting custo

A CEO’s Experience During the COVID-19 Crisis — Part III : Looking Ahead

Challenges in Reporting Vulnerabilities in Belgian Banking System

The article discusses the author's experience with reporting a vulnerability in a Belgian bank's online platform through the Coordinated Vul