Mary Ann Davidson, CSO of Oracle, unleashed a firestorm of controversy this week thanks to a misguided and ill-advised blog post. Davidson ranted about customers doing independent vulnerability scans to detect flaws in Oracle code. Oracle has since removed the post, but the genie is out of the bottle and the public relations damage is already done. Cybercriminals will not stop attempting to find vulnerabilities they can exploit, so it is of vital importance that a white hat attempt to find them first.”]

