It’s a scoop

What if you discover a vulnerability in a commonly used software that may expose private information?  Do you have a duty to disclose?

“Microsoft Says Windows Was Exploited by Hackers,” The Wall Street Journal, November 2, 2016 A3.  This flaw (and one in Adobe’s Flash) may have led to the disclosure of information in the  Democratic National Committee.  “Microsoft … criticized … Google for publicly identifying the Windows flaw on Monday, before Microsoft had a chance to issue a patch.”  The patch is scheduled for release on November 8 (propitious, isn’t it?).

Maybe not a legal duty, but if it happens at a competitor, do you have a duty to your shareholders to disclose this information?  Did Microsoft know about this flaw earlier?

 

Advertisements

Leave a comment

Filed under Definition, Duty, Information, IT, Ownership, Security, To report, Vendors

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s