PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

How Hacktivity Can Save Your Company: Experts Weigh In

hackerone.com | vulnerability | #vulnerability-disclosure | #government | #policy | #hackerone | #cvd | #atlantic-council
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Recap of an Atlantic Council panel on coordinated vulnerability disclosure: federal CVD progress, assuming benevolence in hackers, building relationships, and not first learning of bugs on Twitter.
Published
Collected

Related coverage

blog · hackerone.com
Report Smarter, Not Harder: HackerOne's Case for Better CIRCIA Rules
This coverage gives security teams current context for monitoring, validation, and remediation.
vulnerability · yeswehack.com
Coordinated Vulnerability Disclosure policy for a safer cyberspace
Argues coordinated vulnerability disclosure needs clear legal guidelines to thrive, noting fragmented EU interpretations of hacking and outlining how policy can make researcher reporting safer.
vulnerability · yeswehack.com
A framework for successful vulnerability disclosure policy
A YesWeHack framework for coordinated vulnerability disclosure tackling legal, awareness and communication barriers, with infographics to help organizations build a workable reporting process.
vulnerability · yeswehack.com
Incentive Policy for Coordinated Vulnerability Disclosure
An explainer contrasting Coordinated Vulnerability Disclosure with 'responsible disclosure', arguing CVD keeps vendors and researchers cooperating, and outlining what an incentive policy should cover.
blog · wiz.io
Securing Critical Infrastructure in the Cloud Era: A Policy and Technology Blueprint
Wiz calls for a policy-and-technology blueprint to secure critical infrastructure as power, water and healthcare systems move to the cloud, eroding traditional defenses against advanced adversaries.
blog · wiz.io
What the U.S. AI Action Plan Means For Cyber Defenders
Wiz reads the U.S. AI Action Plan for cyber defenders: accelerating AI adoption and building infrastructure also widens the attack surface, so it pairs speed with security foundations and governance.
Back