PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

How Coordinated Vulnerability Disclosure Can Boost Election Integrity and Public Perception

hackerone.com | vulnerability | #vulnerability-disclosure | #policy | #election-security | #cvd | #panel
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

A panel of election security and CVD experts shared advice with US election officials on how coordinated vulnerability disclosure strengthens election integrity and public trust.
Published
Collected

Related coverage

vulnerability · yeswehack.com
Coordinated Vulnerability Disclosure policy for a safer cyberspace
Argues coordinated vulnerability disclosure needs clear legal guidelines to thrive, noting fragmented EU interpretations of hacking and outlining how policy can make researcher reporting safer.
vulnerability · yeswehack.com
A framework for successful vulnerability disclosure policy
A YesWeHack framework for coordinated vulnerability disclosure tackling legal, awareness and communication barriers, with infographics to help organizations build a workable reporting process.
vulnerability · yeswehack.com
Incentive Policy for Coordinated Vulnerability Disclosure
An explainer contrasting Coordinated Vulnerability Disclosure with 'responsible disclosure', arguing CVD keeps vendors and researchers cooperating, and outlining what an incentive policy should cover.
blog · hackerone.com
Report Smarter, Not Harder: HackerOne's Case for Better CIRCIA Rules
This coverage gives security teams current context for monitoring, validation, and remediation.
blog · bugcrowd.com
Builders and Breakers: How Ethical Hackers are Securing Elections
Building bridges between the builders of voting technology and hackers operating in good faith in order to expose critical vulnerabilities before threat actors do.
vulnerability · hackerone.com
Securing Our Elections Through Vulnerability Testing and Disclosure
HackerOne and IT-ISAC hosted a live hacking event where 15 vetted researchers tested voting devices from three manufacturers, filing 21 vulnerability reports in 48 hours to improve election security.
Back