PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

60 Days of Insights from the DOD’s Defense Industrial Base Vulnerability Disclosure Program Pilot

hackerone.com | vulnerability | #defense | #vdp | #vulnerability-disclosure | #hackerone | #dod | #dib-vdp
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Two months into the DIB-VDP pilot, DoD VDP's Melissa Vice and HackerOne's Michiel Prins explain how the program extends the Pentagon's disclosure model to defense industrial base vendors.
Published
Collected

Related coverage

blog · hackerone.com
Critical PHP Vulnerabilities: What Security Teams Need to Know
Learn about the critical PHP vulnerabilities, HackerOne’s response, and the rise in reports. Review patching guidance and coordinated disclosure practices.
blog · hackerone.com
Report Smarter, Not Harder: HackerOne's Case for Better CIRCIA Rules
This coverage gives security teams current context for monitoring, validation, and remediation.
blog · hackenproof.com
Vulnerability Disclosure Policy: A Guide for Business Leaders
Explains what a vulnerability disclosure policy is and why the EU CRA and NIS2 now make it a compliance expectation, then walks through the key decisions behind each policy section, offering a free template for security and legal teams to adapt.
blog · tenzai.com
An open-weight model powered the #1 HackerOne VDP research operation
Tenzai's AI hacker topped the world's largest bug bounty leaderboard on GLM 5.2, a model anyone can download, and the offensive capability once limited to a few frontier labs is now within anyone's reach.
vulnerability · hackerone.com
How Federal Agencies Use Vulnerability Disclosure Policies to Level Up Security
Vulnerability disclosure policies are becoming a requirement for federal agencies. The article recaps HackerOne's government work since Hack the Pentagon and five components of an effective VDP.
vulnerability · hackerone.com
Why Every Federal Agency Needs a VDP
A CISA draft directive requires all US federal civilian agencies to publish a vulnerability disclosure policy, following the DoD VDP model that surfaced 12,000+ vulnerabilities in three years.
Back