There exist companies that sell their knowledge of bug bounties to mainly government organizations that need specific and tailored cybersecurity capabilities and protective solutions.

+To what extent do you think governments are gathering information on zero-day exploits and then using them or holding them in reserve for the future?

+Should this be the work of a government?

+Or should a government that has knowledge of a vulnerability make that information known to the public so that its citizens can secure their systems to be resilient against attacks?

Answer rating: 100% (QA)

The issues surrounding governments gathering of information on zeroday exploits and their use or withholding are complex and raise various ethical and practical considerations Lets explore the questio... View the full answer