Latest Ethical Disclosure news

Dev rejects CVE severity, makes his GitHub repo read-only

The popular open source project, 'ip' had its GitHub repository archived, or made "read-only" by its developer as a result of a dubious CVE report filed for his project. Unfortunately, open-source developers have recently been met with an uptick in debatable or outright bogus CVEs filed for their projects.
- Ax Sharma
- June 30, 2024
- 10:31 AM
- 2
Hone your cybersecurity skills with this 24-course training bundle

Cybersecurity is central to everyday life for IT professionals, and taking the time to hone your skills pays dividends for your career. The Complete 2021 CyberSecurity Super Bundle helps you upskill for $69.99, 99% off the MSRP of $7080.
- BleepingComputer Deals
- February 26, 2022
- 07:17 AM
- 0
Engineer reports data leak to nonprofit, hears from the police

A security engineer and ex-contributor to the open systems non-profit organization, Apperta Foundation, recently reported a data leak to them. In return, he gets contacted by their lawyers and eventually the police.
- Ax Sharma
- March 25, 2021
- 04:35 AM
- 4
Georgia Senate Passes Bill That Criminalizes Unauthorized Pen-Tests

A bill was passed yesterday by the state of Georgia that causes any unauthorized access to a computer to be considered "Unauthorized Computer Access" & "shall be punished for a misdemeanor of a high and aggravated nature". This bill amends the Georgia code, which originally only considered unauthorized access with malicious intent.
- Lawrence Abrams
- March 30, 2018
- 05:30 PM
- 2
MedSec and Muddy Waters Partnership may put Profit over Responsible Disclosure

Typically when information security firm's discover vulnerabilities in hardware, they disclose them to the manufacturer so that they can be fixed. Healthcare security firm, MedSec, is breaking from this norm and instead shared this information with the Muddy Waters Research firm who has shorted the stock based on this information.
- Lawrence Abrams
- August 26, 2016
- 09:53 AM
- 2

Dev rejects CVE severity, makes his GitHub repo read-only

Hone your cybersecurity skills with this 24-course training bundle

Engineer reports data leak to nonprofit, hears from the police

Georgia Senate Passes Bill That Criminalizes Unauthorized Pen-Tests

MedSec and Muddy Waters Partnership may put Profit over Responsible Disclosure