Security News

Zero-day disclosure-to-weaponization period cut in half (Help Net Security)
2015-08-06 13:11

There's no doubt about it: the batch of stolen information leaked in the wake of the Hacking Team breach was a boon for exploit kit developers. Not only did it contain a number of exploits for prev...

U.S. Government Wades Into Vulnerability Disclosure (Threatpost)
2015-07-10 14:57

Security researchers and software vendors have spent decades trying to work out the process of vulnerability disclosure, with limited success. Now the federal government is joining the fray in...

Why vulnerability disclosure shouldn’t be a marketing tool (Help Net Security)
2015-06-30 07:28

There have been many arguments within the security community on how researchers should disclose the existence of a security vulnerability. Some argue that full disclosure is the best approach as it ma...