The ethical process of handling a newly discovered vulnerability: notify the vendor first, allow approximately 90 days for a fix, then disclose publicly if the vendor fails to act.
Want to actually apply concepts like this instead of just reading definitions?
Practice free on Zamlom