Krebs on Security

SEPTEMBER 20, 2021

In a bid to minimize these scenarios, a growing number of major companies are adopting “ Security.txt ,” a proposed new Internet standard that helps organizations describe their vulnerability disclosure practices and preferences. An example of a security.txt file. well-known/security.txt.

Retail 314

Retail Healthcare Internet Internet 314

Malwarebytes

OCTOBER 7, 2022

This change has improved our response efficiency to two days, and we’re working on getting that even lower: security.txt. To make it easier to submit security vulnerabilities online, we now use the security.txt file standard defined by RFC, 9116. well-known/security.txt. For example: [link].

88

88

Troy Hunt

JANUARY 14, 2018

In that post, I spoke about people giving up when it gets too hard: Many well-intentioned people simply give up and don't report serious security incidents when the effort is too high or the risk is too great. They may adhere to a convention or be published elsewhere on their website: Look for a security.txt file at /.well-known/security.txt

Data breaches 150

Data breaches Passwords Accountability Media 150

Krebs on Security

FEBRUARY 24, 2020

Holden said the seller of the exploit code — a ne’er-do-well who goes by the nickname “ 500mhz ” –is known for being reliable and thorough in his sales of 0day exploits (a.k.a. A snippet from the documentation provided by 500mhz for the Zyxel 0day. EMOTET GOES IOT?

IoT 250

IoT Cybercrime Ransomware Firewall 250