#coordinated disclosure

[senki]

Threat Researchers Leveraging Shadowserver for Responsible Disclosure

I was just finishing a Shadowserver ticket from a threat researcher who knew how to leverage the Shadowserver Foundation’s trust. This threat researcher was exploring a risk on one of their customers. While exploring this risk, they discovered an ISP had multiple devices with SNMP wide open (we’ll get to why SNMP open is a critical risk). The threat researcher didn’t have a way to contact the…

Threat Researchers Leveraging Shadowserver for Responsible Disclosure

[attritionorg]

MSRC; Tell The Whole Story Please

Every so often, it seems that Microsoft Security Response Center (MSRC) likes to stick their proverbial foot in their mouth on the topic of vulnerability disclosure. The root issue is that collectively, MSRC does not seem to appreciate either their own history or the bigger picture. As such they have a myopic view on the topic. The latest comes in the form of a new blog titled “A shared…

MSRC; Tell The Whole Story Please