Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

On disclosure, confidentiality, and norms…

bugcrowd.com | blog | #bugcrowd | #vulnerability-disclosure | #casey-ellis | #cvd | #disclosure-policy | #cert-cc

Summary

Bugcrowd founder Casey Ellis answers CERT/CC concerns about non-disclosure defaults: the company is pro-disclosure and defaults public programs to Coordinated Vulnerability Disclosure (CVD).
Published
Collected

original ↗

Related coverage

  1. A framework for successful vulnerability disclosure policy (yeswehack.com)
  2. Mobilising collective intelligence for better security (yeswehack.com)
  3. Roles and responsibilities for efficient vulnerability disclosure (yeswehack.com)
  4. The Cybersecurity Act: Strengthening coordinated vulnerability disclosure at the European level (yeswehack.com)
  5. Incentive Policy for Coordinated Vulnerability Disclosure (yeswehack.com)
  6. What’s changed in AI security over the past two years (bugcrowd.com)

back