It’s a scoop

What if you discover a vulnerability in a commonly used software that may expose private information?  Do you have a duty to disclose?

“Microsoft Says Windows Was Exploited by Hackers,” The Wall Street Journal, November 2, 2016 A3.  This flaw (and one in Adobe’s Flash) may have led to the disclosure of information in the  Democratic National Committee.  “Microsoft … criticized … Google for publicly identifying the Windows flaw on Monday, before Microsoft had a chance to issue a patch.”  The patch is scheduled for release on November 8 (propitious, isn’t it?).

Maybe not a legal duty, but if it happens at a competitor, do you have a duty to your shareholders to disclose this information?  Did Microsoft know about this flaw earlier?


Leave a comment

Filed under Definition, Duty, Information, IT, Ownership, Security, To report, Vendors

Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s