7 stories tagged responsible-disclosure, newest first.
169 points by drewsberry | 203 comments
Blog post surveying a week of critical software vulnerabilities, including PHP2Shell RCEs found with AI, and discussing whether LLM-driven exploitation is the new normal.
223 points by mrkn1 | 89 comments
Phoronix news article reporting that Trend Micro's Zero Day Initiative accidentally posted several unpatched Linux kernel vulnerability reports to the public LKML.
722 points by morpheuskafka | 185 comments
A Tell HN post reporting that Fiverr served sensitive customer files via public Cloudinary URLs that are indexed by Google, exposing PII such as tax forms.
831 points by toomuchtodo | 381 comments
Blog post by a diving instructor and platform engineer recounting how reporting a security vulnerability led to a legal response from the affected organization.
442 points by bearsyankees | 265 comments
A blog post by a security researcher describing vulnerabilities found in a dating app and the startup's poor handling of the disclosure.
385 points by NetBender | 280 comments
Security researcher evilsocket's writeup of a remote code execution attack on GNU/Linux and UNIX systems via CUPS and cups-browsed, plus notes on the disclosure process.
395 points by epoch_100 | 274 comments
Blog post transcript of a DEF CON 31 talk about receiving a legal threat from classmates at Fizz over good-faith security research.