Disclosing vulnerabilities improves security for everyone

According to a new study 90 percent of IT professionals believe disclosing vulnerabilities serves a broader purpose of improving how software is developed, used and fixed. The survey from application security testing specialist Veracode finds more than a third of companies received an unsolicited vulnerability disclosure report in the past 12 months, representing an opportunity to work together with the reporting party to fix the vulnerability and then disclose it, improving overall security. The study also shows security researchers are generally reasonable and motivated by a desire to improve security for the greater good rather than by financial gain. 57… [Continue Reading]