I was sent an email today (the email did land in spam folder) from this person stating they found some vulnerabilities and after asking what they were, they replied back with a list.
I'm unsure if it's an automated email, or if it's a scammer, but it may be worth it for someone from IPS to look into? Who do I contact for this?