Cybersecurity
Capital One Breach a Win for Crowdsourced Cybersecurity
- Some offer pats on the back, others dangle ‘bug bounties’
- Security researcher alerted bank to leaked data in GitHub file
This article is for subscribers only.
When Ali Tutuncu found a vulnerability in Capital One Financial Corp.’s software in March, the company fixed the flaw in 20 days. An independent security researcher, Tutuncu said the bank thanked him and added him to its page of fame.
“They did not pay financially,” he said. “Still, it was a nice experience.”