If your job isn't to handle security, this may be slightly overstepping your bounds (ie taking time away from whatever you do to toy around with the latest expl

If your job isn't to handle security, this may be slightly overstepping your bounds (ie taking time away from whatever you do to toy around with the latest exploits). Probably better to give it to the people in charge of security. If that person is your boss, then you have a dilemma. Either your boss doesn't fully understand what happened or perhaps the bug you found undermines his security work and he viewed your testing it as a sign of insubordination. I'm sure your company is open to this sort of thing, but send it through the proper channels. If there aren't any proper channels, this would be a good time to ask around to see if something can be created to handle situations like these when they come up.