Reporting a Breach or Vuln? Be Sure Your Lawyer's on Call

The report describes a growing global trend of legal and regulatory pushback against security researchers and whistleblowers who disclose data breaches or software vulnerabilities, citing specific cases in Turkey, Malta, Poland, China, and the United States. It highlights the risks researchers face—including arrests, criminal charges, and lawsuits—and warns that recent international and national legal developments (such as the UN cybercrime treaty and proposed national laws) may further criminalize legitimate vulnerability research and disclosure, undermining coordinated security efforts.