PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

OpenAI VDP for bugs found by AI, CVE funding fears persist, ‘shift left’ towards vulnerability overload – OffSec roundup for CISOs

yeswehack.com | vulnerability | #ai-security | #vdp | #shift-left | #openai | #roundup | #cve-program
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Roundup: OpenAI's outbound VDP for bugs found by its AI, persistent CVE/NVD funding fears, 'shift left' vulnerability overload, and why Mikko Hyppönen now focuses on drones.
Published
Collected

Related coverage

blog · yeswehack.com
NIS 2 in force, Cyber Resilience Act adopted, CISA hails VDP impact – OffSec roundup for CISOs
CISO roundup: NIS 2 now in force and the Cyber Resilience Act adopted; cyber-skills shortage drives security-services spending; CISA hails VDP impact; TeamViewer's Bug Bounty story.
blog · yeswehack.com
Tackling tech sprawl, CISO burnout, NIS 2 now enforceable – OffSec roundup for CISOs
CISO roundup: Forrester's 2025 priorities on supply-chain security and tech sprawl, CISO burnout, Malta's national VDP debate, and NIS 2's global implications.
vulnerability · yeswehack.com
US House passes bill mandating vulnerability disclosure policies for federal contractors
The US House passed a bill mandating VDPs for federal contractors, consistent with NIST guidelines; the roundup also covers the UK Home Office's own vulnerability disclosure policy launch.
vulnerability · yeswehack.com
Countdown to NIS 2 compliance: Key insights and implications for your SecOps strategy
FAQ on the NIS 2 Directive ahead of transposition: scope, risk-management and vulnerability requirements, penalties, and Belgium's template mandating disclosure policies.
vulnerability · yeswehack.com
Vulnerability Disclosure Policy as a first step of GfK’s crowdsourced security strategy
GfK's security team explains why it started with a Vulnerability Disclosure Policy before Bug Bounty, using the VDP as a low-risk first step to build a business case and earn internal trust.
vulnerability · yeswehack.com
Turnkey VDP Open Source: making a difference in enhancing cybersecurity as a “public good”
YesWeHack open-sourced its turnkey VDP solution to spread responsible vulnerability disclosure, framing cybersecurity as a 'public good' amid policy momentum from the OECD, EU and the CyAN coalition.
Back