Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

To Attest or Not to Attest: Questions from the Trump Cyber Executive Order

hackerone.com | blog | #cisa | #vdp | #policy | #executive-order | #software-supply-chain | #us-government | #nist-ssdf

Summary

Trump's cyber EO rolls back federal validation of software attestations, but vendors must still self-attest to NIST SSDF and run a vulnerability disclosure program (VDP).
Published
Collected

original ↗

Related coverage

  1. Report Smarter, Not Harder: HackerOne's Case for Better CIRCIA Rules (hackerone.com)
  2. The President’s Executive Actions on AI Have a Lot to Say on Cybersecurity (wiz.io)
  3. Biden's AI Executive Order: What it says, and what it means for security teams (wiz.io)
  4. US House passes bill mandating vulnerability disclosure policies for federal contractors (yeswehack.com)
  5. Turnkey VDP Open Source: making a difference in enhancing cybersecurity as a “public good” (yeswehack.com)
  6. Vulnerability Disclosure Policy through the eyes of a bug hunter (yeswehack.com)

back