Beware the Bug Bounty
Beware the Bug Bounty In recent months, bug-bounty programs have shifted from mitigating risk to inadvertently creating new liabilities for customers and vendors. Bug-bounty programs have accelerated in the past few years. Many organizations — bewitched by bounty programs' promise of faster vulnerability identification, improved product security, and cost-effective outsourcing solutions — find themselves facing unanticipated vulnerabilities and unexpected threats. What at first appeared as a reliable quick fix to a big problem has instead become a new liability. With validation requiremen...
Source: darkreading.com