Why You Need a Vulnerability Disclosure Program (VDP)
projectblack.io | vulnerability | #cloud | #vdp | #vulnerability-disclosure | #responsible-disclosure | #security-txt | #cloud-storage | #s3-buckets
Summary
Contrasting disclosures of exposed cloud storage buckets: one company handled it perfectly; the other rebuffed the researcher and left data public — a case for a vulnerability disclosure program.
- Published
- Collected
--- id: 3768 title: "Why You Need a Vulnerability Disclosure Program (VDP)" source_domain: projectblack.io source_url: "https://projectblack.io/blog/a-tale-of-2-vulnerability-disclosures/" published_at: "2023-09-18T00:36:28Z" tags: ["cloud", "vdp", "vulnerability-disclosure", "responsible-disclosure", "security-txt", "cloud-storage", "s3-buckets"] phying_url: "https://phying.com/item/3768" lang: en --- # Why You Need a Vulnerability Disclosure Program (VDP) ## Summary Contrasting disclosures of exposed cloud storage buckets: one company handled it perfectly; the other rebuffed the researcher and left data public — a case for a vulnerability disclosure program. ## Intelligence Metadata - **Sources:** projectblack.io - **Published:** 2023-09-18T00:36:28Z - **Original:** https://projectblack.io/blog/a-tale-of-2-vulnerability-disclosures/ - **Phying News:** https://phying.com/item/3768