Microsoft says governments should stop ‘hoarding’ security vulnerabilities
"Microsoft references the WannaCry ransomware's source as an vulnerability known by the NSA, noting that similar security holes were revealed on WikiLeaks in documents stolen from the CIA. It says that the governments of the world should treat the WannaCry attack as 'a wake-up call,' to consider the 'damage to civilians that comes from hoarding these vulnerabilities and the use of these exploits,' and to adopt the 'Digital Geneva Convention' the company first suggested in February. That Convention would have a new stipulation, too: 'a new requirement for governments to report vulnerabilities to vendors, rather than stockpile, sell, or exploit them.'" Continue reading →