vulnerabilities
'We can't build a secure sandbox nor monitor our own model tests properly' is not a flex - and Hugging Face's Thomas Wolf has views
"Issues that depend on compromised or malicious inputs already present in that context generally fall outside our bug bounty scope."
So far, the Gold Eagle vulnerability clearing house seems to be CISA with some extra bits.
watchTowr also credited after letting “our small pets walk across our keyboard, and watching what happens.”
Bug was exploited as a zero day for two weeks before a patch landed
AWS Continuum promises "machine speed" remediation for the post-Mythos era.
"“These deployments rarely got the hardening a production web app would. They run with default authentication settings and sit on public IPs because someone needed to demo a flow to a stakeholder..."
