FuzzingLabs has raised concerns about Gecko Security, a startup backed by YCombinator, claiming that Gecko improperly filed for two CVEs that were based on FuzzingLabs’ vulnerability reports without giving due credit. This accusation highlights the ongoing debates within the cybersecurity community about proper crediting and disclosure practices.
Gecko Security has responded to the allegations by asserting that there has been a misunderstanding regarding the disclosure process. They stand firm on their position, suggesting no wrongdoing took place. The situation underscores the importance of clear communication and proper attribution in the fast-evolving world of vulnerability research, where overlapping disclosures are a routine occurrence and can lead to disputes such as this one.
👉 Pročitaj original: BleepingComputer
