For the last decade, the bug bounty program has been a must-have badge of honor for CISOs. The pitch was seductive: Why rely on a small internal team when you can have thousands of researchers poking ...