DHS questions vulnerability disclosure program
Undiscovered vulnerabilities in agency information systems could be exploited by nation-states or hackers.
Bug bounty industry, helped by federal business, is growing up fast
The industry — which basically hires and sells the services of freelance hackers who are paid to find weaknesses in systems or products — is seeing a period of rapid growth, in part because of early successes in the federal market.
GSA close to launching bug bounty
GSA's Technology Transformation Service issued a draft solicitation through an open source GitHub project earlier this year looking for potential experienced vendors to help it establish its own bug bounty program.