In 2007, as his two-year agreement to stay mum about his zero-day expired, Charlie began putting the finishing touches on his white paper—academically titled “The Legitimate Vulnerability Market: Inside the Secretive World of Zero-Day Exploit Sales.” It was then that he received the call from Fort Meade.
