---
id: 1222
title: "To Attest or Not to Attest: Questions from the Trump Cyber Executive Order"
source_domain: hackerone.com
source_url: "https://www.hackerone.com/blog/trump-cyber-executive-order"
published_at: "2025-06-18 20:34"
tags: ["cisa", "vdp", "policy", "executive-order", "software-supply-chain", "us-government", "nist-ssdf"]
phying_url: "https://phying.com/item/1222"
lang: en
---

# To Attest or Not to Attest: Questions from the Trump Cyber Executive Order

## Summary

Trump's cyber EO rolls back federal validation of software attestations, but vendors must still self-attest to NIST SSDF and run a vulnerability disclosure program (VDP).

## Intelligence Metadata

- **Sources:** hackerone.com
- **Published:** 2025-06-18 20:34
- **Original:** https://www.hackerone.com/blog/trump-cyber-executive-order
- **Phying News:** https://phying.com/item/1222