{"id":43352,"date":"2021-10-11T22:01:08","date_gmt":"2021-10-11T22:01:08","guid":{"rendered":"https:\/\/www.threatshub.org\/blog\/zero-day-hunters-seek-laws-to-prevent-vendors-suing-them-for-helping-out-and-doing-their-jobs\/"},"modified":"2021-10-11T22:01:08","modified_gmt":"2021-10-11T22:01:08","slug":"zero-day-hunters-seek-laws-to-prevent-vendors-suing-them-for-helping-out-and-doing-their-jobs","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/zero-day-hunters-seek-laws-to-prevent-vendors-suing-them-for-helping-out-and-doing-their-jobs\/","title":{"rendered":"Zero-day hunters seek laws to prevent vendors suing them for helping out and doing their jobs"},"content":{"rendered":"

Cybersecurity Advisors Network (CyAN), the Paris-based body that represents infosec pros, has created a new working group to advocate for legislation that stops vendors from suing when security researchers show them zero-day bugs in their kit.<\/p>\n

Peter Coroneos, CyAN international veep and leader of its new “Zero Day Legislative Project” told The Register<\/i> the organisation recently staged a virtual meeting of 150-plus security researchers and the topic of aggressive legal responses to disclosures was high on their list of worries.<\/p>\n

“Typically, they find a flaw, then notify the vendor. And at that point they get a cease and desist or threatening letter,” Coroneos told The Register<\/i>. “The threats usually involve copyright and\/or criminal laws that govern access or interference with computer systems.” An archive of threats made against researchers can be found here<\/a>.<\/p>\n