News for hackers. Stuff that matters.

A comment on Open-Source Detector of CISA's Known Exploitable Vulnerabilities. Parent comment

Re:Open-Source Detector of CISA's Known Exploitable Vulnerab... by yieldcrv on Tuesday January 16, 2024 @06:55AM (#39012292)
this seems to be airing a frustration that has moved beyond accuracy in the process, companies offering bug bounties may have done the bare minimum at one point in time but every production push they do changes that, and potentially reintroduces simple scannable vulnerabilities.
[ Parent | on HN ]
Re:Open-Source Detector of CISA's Known Exploitable Vulnerab... by scoot on Wednesday January 17, 2024 @06:28PM (#39035136)
That's fair. We get numerous reports from script kiddies reporting "vulnerabilities" that aren't, because they don't understand the tool that they're running, or the output that it produces, or why it isn't relevant. It's possible that they catch a known issue, but the reality is that the majority have no idea what they're doing.
[ Parent | on HN ]