Exploit Vendor Zerodium Puts $100,000 Bounty On Flash's New Security Feature (softpedia.com)

Posted by Soulskill on Tuesday January 5, 2016 @09:42AM from the all-about-the-benjamins dept.

An anonymous reader writes: Zerodium, the company that buys zero-day bugs from security researchers and then sells them forward to government intelligence agencies, has put out a new bounty, this one on Adobe's Flash Player. The exploit vendor is offering $100,000 to the first researcher that finds a similar zero-day bug, capable of avoiding Flash's newly-released isolated heap memory protection feature. Previously, Zerodium offered $1 million to a security researcher for a zero-day bug in Apple's iOS 9 operating system.

1 of 57 comments (clear)

Min score:

Reason:

Sort:

Arms trafficking by Etherwalk · 2016-01-05 10:28 · Score: 4, Informative

For all the ridiculous arms export regulations around encryption historically, this actually seems much more like serious arms sales. Explicitly selling vulnerabilities, other than in a bug bounty program, is organized crime.