Post #2673247
2026-04-08 15:09 UTC
To be honest though, with quoted figures of $10-20,000 to find each of these vulns, I don’t think they’re going after the defender market...
Replies (1)
-
@hacksilon@infosec.exchange 2026-04-08 15:16
@neilmadden@infosec.exchange to be fair to them: an entire campaign cost $20k, but each campaign found more than one bug, so the price per bug is much lower. In a talk, one of their researchers said that he's sitting on 100+ high confidence findings from their Linux kernel runs alone that he hasn't yet had the time to verify and report to the maintainers. Of course, that's still a lot of money per bug, no doubt about it, but not quite the $20k you are quoting.