Turso has announced the discontinuation of its bug bounty program. The decision comes as the company shifts its security strategy.
Turso, a SQLite-compatible database platform, is ending its public bug bounty initiative. The company did not disclose specific reasons for the retirement in its announcement.
Bug bounty programs incentivize independent security researchers to identify and report vulnerabilities before they can be exploited. Organizations typically use them as a cost-effective complement to internal security testing.
The announcement sparked significant discussion in the developer community, with 223 comments on Hacker News reflecting mixed reactions. Some questioned the implications for security posture, while others noted potential shifts in how companies approach vulnerability disclosure.
Turso's decision aligns with broader industry trends where some organizations consolidate security programs or transition to alternative vulnerability management approaches. Companies may retire bounty programs due to resource allocation changes, shift to managed security services, or internal restructuring.
No details were provided regarding timelines for existing bounty submissions or changes to Turso's vulnerability disclosure policy.
A new browser fingerprinting vector has emerged in Chromium 148, where the Math.tanh function produces different results across operating systems. This discrepancy can be exploited to identify a user's underlying OS without explicit permission.
Kaseya is hosting a webinar on strengthening MSP resilience through SaaS backups and business continuity strategies. The session focuses on how recovery capabilities prove critical when security defenses are breached.
A new variant of RedHook Android malware abuses Wireless ADB (Android Wireless Debugging) to gain shell-level privileges without requiring a computer connection. This represents a significant escalation in the malware's capabilities.
Fraudsters are creating convincing counterfeit news articles impersonating major publishers like the Guardian to direct social media users to bogus investment sites. The fake stories feature fabricated celebrity endorsements and financial narratives designed to establish credibility.