PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

US Government Mandates Vulnerability Disclosure for IoT

hackerone.com | vulnerability | #iot | #vdp | #vulnerability-disclosure | #government | #policy | #nist
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

The IoT Cybersecurity Improvement Act mandates vulnerability screening and disclosure policies for IoT devices sold to the US government, building on NIST SP 800-53 and IR 8259.
Published
Collected

Related coverage

vulnerability · yeswehack.com
US House passes bill mandating vulnerability disclosure policies for federal contractors
The US House passed a bill mandating VDPs for federal contractors, consistent with NIST guidelines; the roundup also covers the UK Home Office's own vulnerability disclosure policy launch.
blog · hackerone.com
Report Smarter, Not Harder: HackerOne's Case for Better CIRCIA Rules
This coverage gives security teams current context for monitoring, validation, and remediation.
blog · yeswehack.com
UK PSTI Act: ‘World first’ IoT security rules offer reminder of VDP virtues
UK PSTI Act: the 'world first' IoT law, in force since 29 April, mandates vulnerability-report contacts, bans weak default passwords and sets update commitments; 76% of vendors still lagged.
blog · hackenproof.com
Vulnerability Disclosure Policy: A Guide for Business Leaders
Explains what a vulnerability disclosure policy is and why the EU CRA and NIS2 now make it a compliance expectation, then walks through the key decisions behind each policy section, offering a free template for security and legal teams to adapt.
blog · wiz.io
Securing Critical Infrastructure in the Cloud Era: A Policy and Technology Blueprint
Wiz calls for a policy-and-technology blueprint to secure critical infrastructure as power, water and healthcare systems move to the cloud, eroding traditional defenses against advanced adversaries.
blog · wiz.io
What the U.S. AI Action Plan Means For Cyber Defenders
Wiz reads the U.S. AI Action Plan for cyber defenders: accelerating AI adoption and building infrastructure also widens the attack surface, so it pairs speed with security foundations and governance.
Back