Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

ASUS Vulnerability Disclosure Déjà vu

hackerone.com | vulnerability | #vulnerability-disclosure | #ftc | #cert-cc | #coordination | #asus

Summary

HackerOne flags ASUS's repeated disclosure failures: a researcher's LiveUpdater remote-code-execution report was deflected for weeks before public disclosure, echoing ASUS's 2014 FTC case.
Published
Collected

original ↗

Related coverage

  1. Mobilising collective intelligence for better security (yeswehack.com)
  2. Disclosure Assistance Refresh (hackerone.com)
  3. 411 for Hackers: Disclosure Assistance (hackerone.com)
  4. CVE-2023-54391 and beyond: excavating silent patches and the attacker-defender information gap (yeswehack.com)
  5. A framework for successful vulnerability disclosure policy (yeswehack.com)
  6. Roles and responsibilities for efficient vulnerability disclosure (yeswehack.com)

back