Understanding Responsible Disclosures

Security Researcher Discovers Critical Data Vulnerability in Sports Insurer Portal, Faces Legal Threats Instead of Cooperation

A diving instructor and platform engineer discovers a critical security vulnerability in a sports insurer's portal during a dive trip, expos

Why the 90-day responsible disclosure policy is obsolete in the age of LLMs

The article argues that the traditional 90-day responsible disclosure window for security vulnerabilities is obsolete in the age of LLMs. Th

Vulnerability Disclosure in the Age of AI - Schneier on Security

Microsoft calls for coordinated vulnerability disclosure after zero-day disclosures put customers at risk

Microsoft addresses the recent public disclosure of zero-day vulnerabilities that were not shared with the company beforehand, putting custo

Is Your Organization Prepared For Vulnerability Disclosure?

Challenges in Reporting Vulnerabilities in Belgian Banking System

The article discusses the author's experience with reporting a vulnerability in a Belgian bank's online platform through the Coordinated Vul