Third-party vulnerability disclosure and bug bounty programs should never be the main path to discovering software insecurities.

Luta Security response to CISA's BOD 22-01

On May 25, 2021, Luta Security CEO Katie Moussouris testified before Congress on supply chain security

Luta's CEO hacked the Clubhouse app; vulns fixed now

Many of us kick off each new year enthusiastically brimming with more resolutions than a DNS server. We may resolve to get stronger, so...

In November 2020, the Federal Trade Commission (FTC) announced a settlement with Zoom to reconcile the allegations that the company...

All companies should sign the Pay Equity Now Pledge. It’s not enough to talk about change without doing the work to eliminate pay inequity.

CISA and OMB published instructions for federal agencies on vuln disclosure programs. Sadly, the marching orders are all out of whack.

As our transition period with Zoom ends today, we wanted to review a few highlights from our work on their bug bounty programs, which is...

To learn more about our open positions and apply, click here. Let’s talk a little bit about why we’re different, and why our society and...

When Zoom’s CEO Eric Yuan called me last summer after Jonathan Leitschuh’s vulnerability disclosure, we were all living in a different world