3 ms·
That's the market rate. https://cyberscoop.com/zerodium-android-zero-days-bounty/ https://cyberscoop.com/zerodium-android-zero-days-bounty/
by lern_too_spel 1y ago
That's the market rate. https://cyberscoop.com/zerodium-android-zero-days-bounty/ https://cyberscoop.com/zerodium-android-zero-days-bounty/
- andrepd 1y agoWell TIL that there are zero-day market makers...
- tptacek 1y agoBear in mind: different buyers and different price structured. You can get more selling a vulnerability to CNE shops (say: every intelligence organization in Germany), but you'll be accepting more risk --- the payments are effectively tranched (or, equivalently, back-loaded on "maintenance" fees), and if the vulnerability dies you're S.O.L. Apple also won't make you build all the reliable exploitation enablement tooling a CNE buyer will. So: they pay less.