Mastodawn

Microsoft Revives Vulnerability Disclosure Debate with Researcher Crackdown

Microsoft is stirring up controversy in the vulnerability disclosure debate, clashing with a security researcher over the responsible handling of zero-day vulnerabilities. The tech giant's strong response, including threats of legal action, has sparked heated discussion on coordinated disclosure.

https://osintsights.com/microsoft-revives-vulnerability-disclosure-debate-with-researcher-crackdown?utm_source=mastodon&utm_medium=social

#VulnerabilityDisclosure #CoordinatedDisclosure #ZeroDay #Microsoft #ResponsibleDisclosure

Microsoft Revives Vulnerability Disclosure Debate with Researcher Crackdown

Microsoft cracks down on vulnerability disclosure, sparking debate. Learn how coordinated disclosure impacts security research and what it means for you, read now.

OSINTSights

HN Security Apr 23, 2025

We have identified some security vulnerabilities (CVE-2025-1731) in Zyxel USG FLEX H Series firewall appliances, that allow local users with access to a Linux OS shell to escalate privileges to root.

https://security.humanativaspa.it/local-privilege-escalation-on-zyxel-usg-flex-h-series-cve-2025-1731

#Zyxel #VulnerabilityResearch #CoordinatedDisclosure

Local privilege escalation on Zyxel USG FLEX H Series (CVE-2025-1731) - hn security

“So we wait, this is our […]

hn security

Harry Sintonen Feb 18, 2025

#OpenSSH client is vulnerable to MitM attacks if VerifyHostKeyDNS is enabled - https://www.openwall.com/lists/oss-security/2025/02/18/1

#CVE_2025_26465 #coordinateddisclosure #infosec #cybersecurity

oss-security - MitM attack against OpenSSH's VerifyHostKeyDNS-enabled client

CVE Program Oct 2, 2024

We Speak CVE Podcast episode 26 now available!
“CNA Onboarding Process Myths Versus Facts”
https://youtu.be/N22bsppsJSQ

#CVE #Vulnerability #VulnerabilityManagement #Cybersecurity #EOL #CoordinatedDisclosure #InformationSecurity

CNA Onboarding Process Myths Versus Facts

YouTube

floyd aka floyd_ch Aug 22, 2023

As they are not responding to emails, we are looking for security contacts at Atos/Unify for #coordinatedDisclosure #responsibledisclosure purposes. Please help finding someone, the 2 week initial response deadline is ticking fast... #vulnerability

floyd aka floyd_ch Jun 21, 2023

#coordinateddisclosure is such a pain. Vendor with PGP key on website, we send encrypted advisory. They reply they can‘t decrypt and ask if we exchanged keys already… *sigh* disclosure timeline is running though

floyd aka floyd_ch Nov 23, 2022

Interessanter Artikel zu #CoordinatedDisclosure https://www.inside-it.ch/kontroverse-nach-ende-des-organspende-registers-wann-muessen-luecken-oeffentlich-werden-20221122

Kontroverse nach Ende des Organspende-Registers: Wann müssen Lücken öffentlich werden?

Die Tragödie um das Register von Swisstransplant kennt nur Verlierer. Die Schweiz braucht eine politische Diskussion zu Datenbanken mit sensiblen Informationen und zum Meldeverfahren von Sicherheitslücken.