3 ms·

“Exploitation started three days before the public advisory” I think bug bounty programs are completely overwhelmed right now. Idk how people keep up with them

by smurda 26d ago

“Exploitation started three days before the public advisory” I think bug bounty programs are completely overwhelmed right now. Idk how people keep up with them.

ecares 26d ago
They really don't. I was recently approached by a journalist working on a piece on that exact topic.
- zlokki 26d ago
  Any insights?
dns_snek 26d ago
Mikrotik doesn't have a bug bounty program and their handling of vulnerability reports has always been substandard.