Security researcher Daniel Cuthbert: Bug-reporting Blues: The Vulnerability Disclosure Challenge is the challenge. He says it’s only natural that many more bugs keep coming to light. “Writing secure software is hard. It’s not as simple as people think,” he says. He also discusses how structured security testing, pen testing and bug bounty programs differ and why each can be essential. How organizations and industries respond unfavorably to bug reports or don’t understand how to engage with vulnerability disclosure. How the proposed security standard could help.”]
Source: https://www.govinfosecurity.com/bug-reporting-blues-vulnerability-disclosure-challenge-a-14981