Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

“Exploitation started three days before the public advisory”

I think bug bounty programs are completely overwhelmed right now. Idk how people keep up with them.



They really don't. I was recently approached by a journalist working on a piece on that exact topic.


Any insights?


Mikrotik doesn't have a bug bounty program and their handling of vulnerability reports has always been substandard.




Consider applying for YC's Winter 2027 batch! Applications are open till November 2.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: