Go offline with the Player FM app!
#30: Security Researcher Gets Attacked After Vulnerability Disclosure
Archived series ("Inactive feed" status)
When? This feed was archived on May 06, 2025 14:09 (). Last successful fetch was on February 29, 2024 17:34 ()
Why? Inactive feed status. Our servers were unable to retrieve a valid podcast feed for a sustained period.
What now? You might be able to find a more up-to-date version using the search function. This series will no longer be checked for updates. If you believe this to be in error, please check if the publisher's feed link below is valid and contact support to request the feed be restored or if you have any other concerns about this.
Manage episode 226907086 series 2355351
What happens when a vendor attacks a security researcher who points out security flaws in their software? On this episode, we talk about two white-hat security researchers who discover multiple vulnerabilities in a vendor’s software system. The vendor initially ignores their concerns until the FBI gets involved. It culminates in a physical attack by the vendor’s COO on one of the researchers. We look at all the details around the vulnerabilities, discuss common disclosure concerns and how the FBI has opened up a “Cyber Fusion” unit to act as a liaison between security teams and at-risk vendors.
Topics:
- Atrient has assaulted the security researcher who disclosed the vulnerability
- On reporting the vulnerability
- How the FBI got involved
- Vendor call with the FBI and the security researchers
- The Bug Bounty call
- The ICE Conference assault
- An email from Jessie Gill (Atrient COO)
Links:
Researcher Assaulted By A Vendor After Disclosing A Vulnerability Shodan Shodan wikipedia Dylan on Twitter Shodan Safari, where hackers heckle the worst devices put on the internet
62 episodes
Archived series ("Inactive feed" status)
When? This feed was archived on May 06, 2025 14:09 (). Last successful fetch was on February 29, 2024 17:34 ()
Why? Inactive feed status. Our servers were unable to retrieve a valid podcast feed for a sustained period.
What now? You might be able to find a more up-to-date version using the search function. This series will no longer be checked for updates. If you believe this to be in error, please check if the publisher's feed link below is valid and contact support to request the feed be restored or if you have any other concerns about this.
Manage episode 226907086 series 2355351
What happens when a vendor attacks a security researcher who points out security flaws in their software? On this episode, we talk about two white-hat security researchers who discover multiple vulnerabilities in a vendor’s software system. The vendor initially ignores their concerns until the FBI gets involved. It culminates in a physical attack by the vendor’s COO on one of the researchers. We look at all the details around the vulnerabilities, discuss common disclosure concerns and how the FBI has opened up a “Cyber Fusion” unit to act as a liaison between security teams and at-risk vendors.
Topics:
- Atrient has assaulted the security researcher who disclosed the vulnerability
- On reporting the vulnerability
- How the FBI got involved
- Vendor call with the FBI and the security researchers
- The Bug Bounty call
- The ICE Conference assault
- An email from Jessie Gill (Atrient COO)
Links:
Researcher Assaulted By A Vendor After Disclosing A Vulnerability Shodan Shodan wikipedia Dylan on Twitter Shodan Safari, where hackers heckle the worst devices put on the internet
62 episodes
All episodes
×Welcome to Player FM!
Player FM is scanning the web for high-quality podcasts for you to enjoy right now. It's the best podcast app and works on Android, iPhone, and the web. Signup to sync subscriptions across devices.