In the Front-Page cybersecurity article at the beginning of this module Zerodium was identified as an entity that sells its knowledge of bug bounties to mainly government organizations who need specific and tailored cybersecurity capabilities and protective solutions. To what extent do you think governments are gathering information on zero-day exploits and then using them or holding them in reserve for the future? Should this be the work of a government? Or should a government who has knowledge of a vulnerability make that information known to the public so that its citizens can secure their systems to be resilient against attacks?

Post a discussion (minimum of 100 words) of your thoughts about the questions above regarding governments buying zero-day exploits for their own use instead of providing this information to its citizens