CommentaryIt's Your Vendor. It's Your Customer's Data.How the bug bounty industry's third-party loophole leaves real users exposed.bug-bounty vendor-risk supply-chain disclosure industryApr 25, 2026