The business of bug hunting is a potentially lucrative one for both seasoned security researchers and amateurs with an interest in hacking. Big players such as Google, Samsung and Facebook all offer bounty programs. But theres still a seedy underbelly that unscrupulous bounty hunters can take advantage of if they successfully identify a vulnerability. The average cost of a data breach is $3.8 million, according to research by the Ponemon Institute. The longer it takes to deal with flaws, the greater risk that would-be attackers will weaponize them.”]

