## **Season 4** Episode 6

# Responsible Disclosure and Bug Bounty Programs: Webinar

Adam Logue

Adam Logue, Independent Security Researcher and Synack Red Teamer, discusses his experiences with responsible disclosure and bug bounty programs, and provides a fascinating technical deep dive into a vulnerability he found in Microsoft 365 Copilot during a client-facing engagement.

**Timestamps:**

00:49 – Adam’s background with responsible disclosure and bug bounty programs  
04:33 – Description of M365 vulnerability  
12:34 – Demo of the vulnerability  
17:53 – How to pentest AI  
20:45 – Getting started in pentesting  
23:07 – Benefits of hacking with Synack

[Listen to the Podcast](https://open.spotify.com/episode/7uPIjAKtPTkQVrdMI6qbjN)