3 ms·
> recently growing pattern involves newbie security enthusiasts and bug bounty hunters ostensibly "collecting" CVEs to enrich their resume That's exactly the p
by tamimio 2y ago
> recently growing pattern involves newbie security enthusiasts and bug bounty hunters ostensibly "collecting" CVEs to enrich their resume
That's exactly the problem: they use automated vulnerability scanners and AI to "find" these vulnerabilities, flooding the system with useless reports.
- Avamander 2y agoIt doesn't even have to be a researcher running some tools, it might just be the CNA itself assigning bullshit CVEs. In the end it's quite clear that more verification and a trusted mediator is needed in this system.