New posts in White Hat

How to proceed with a white-hat hacker claiming a vulnerability?

What is an 'Orange team'?

Is demanding a "donation" before disclosing vulnerabilities black hat behavior?