PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

VDPs Are Good For the Government — and Good For Business

hackerone.com | vulnerability | #supply-chain | #vdp | #vulnerability-disclosure | #legislation | #united-states | #federal-contractors
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

The Federal Cybersecurity Vulnerability Reduction Act would require federal contractors to implement VDPs, extending a proven disclosure practice across the government supply chain.
Published
Collected

Related coverage

vulnerability · hackerone.com
2024 Budget Planning: Preparing For U.S. Mandates to Implement Vulnerability Disclosure Policies (VDPs)
U.S. policy is turning VDPs from best practice into legal requirement across federal agencies, IoT vendors, and contractors; organizations should budget for vulnerability disclosure programs now.
vulnerability · yeswehack.com
US House passes bill mandating vulnerability disclosure policies for federal contractors
The US House passed a bill mandating VDPs for federal contractors, consistent with NIST guidelines; the roundup also covers the UK Home Office's own vulnerability disclosure policy launch.
blog · bugcrowd.com
What you need to know about H.R. 872
The House-approved H.R. 872 would mandate VDP adoption by federal cyber contractors through DFARS procurement rules, extending the Hack the Pentagon and BOD 20-01 model across the supply chain.
blog · bugcrowd.com
New Wave of Legislation Puts Crowdsourced Cybersecurity in the Spotlight
A 2022 wave of US cybersecurity laws—over 250 state bills plus federal mandates requiring 72-hour incident and 24-hour ransomware payment reports to CISA—puts crowdsourced security in the spotlight.
blog · hackenproof.com
Vulnerability Disclosure Policy: A Guide for Business Leaders
Explains what a vulnerability disclosure policy is and why the EU CRA and NIS2 now make it a compliance expectation, then walks through the key decisions behind each policy section, offering a free template for security and legal teams to adapt.
vulnerability · hackerone.com
Software Vulnerability Disclosure in Europe: Summary and Key Highlights of the European Parliament CEPS Task Force Report
Key takeaways from the CEPS Task Force report urging the EU to adopt an EU-wide framework and national legislation for software vulnerability disclosure, aligned with ISO standards.
Back