It’s been almost a decade since the first commercial “for-profit” bug bounty companies launched leveraging crowdsourced intelligence to unco...

The mechanics of prioritizing one vulnerability’s business risk over another has always been fraught with concern. What began as securing bu...

It's a pretty common question asked by both bug hunters and journalists alike - "How much is a zero-day vulnerability worth?" ...

A couple of months ago I got my hands on Tobias Klein's new book "A Bug Hunter's Diary" and have only recently managed to ...

It's been an interesting weekend on the "responsible disclosure" front. Reactions and tweet threads from several noted vulnera...

It's like one of those magic candles people place on birthday cakes that sparkle and relight themselves each time you think they've ...

Who's the worlds most frequent discoverer (and discloser) of security vulnerabilities? It's not not a name you're likely to be f...