What if you discover a vulnerability in a commonly used software that may expose private information? Do you have a duty to disclose?
“Microsoft Says Windows Was Exploited by Hackers,” The Wall Street Journal, November 2, 2016 A3. This flaw (and one in Adobe’s Flash) may have led to the disclosure of information in the Democratic National Committee. “Microsoft … criticized … Google for publicly identifying the Windows flaw on Monday, before Microsoft had a chance to issue a patch.” The patch is scheduled for release on November 8 (propitious, isn’t it?).
Maybe not a legal duty, but if it happens at a competitor, do you have a duty to your shareholders to disclose this information? Did Microsoft know about this flaw earlier?
infogovnuggets 