PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

EUCC cyber certification scheme enters early adopter phase after vulnerability disclosure rules issued

yeswehack.com | vulnerability | #bug-bounty | #certification | #compliance | #vulnerability-disclosure | #enisa | #eucc
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

The EU Common Criteria (EUCC) certification scheme enters its early adopter phase; ENISA's disclosure rules cite Bug Bounty programs and VDPs as best practice for certificate holders.
Published
Collected

Related coverage

blog · aikido.dev
Cyber Resilience Act is here! Myth busting and first impressions
Aikido Security's first impressions of the EU Cyber Resilience Act's first reporting deadline, covering the new Single Reporting Platform, its 24/72-hour and 14-day timelines, and compliance myths.
blog · hackenproof.com
Vulnerability Disclosure Policy: A Guide for Business Leaders
Explains what a vulnerability disclosure policy is and why the EU CRA and NIS2 now make it a compliance expectation, then walks through the key decisions behind each policy section, offering a free template for security and legal teams to adapt.
blog · certik.com
How to Prepare for a CCSS Audit
The CryptoCurrency Security Standard (CCSS) certifies how businesses protect private keys across ten control aspects. This guide explains what the audit covers, the three levels, and how to prepare.
vulnerability · yeswehack.com
CVE-2023-54391 and beyond: excavating silent patches and the attacker-defender information gap
CVE-2023-54391: a Proxmox VE auth bypass fixed silently in 2023, exploited in 2026 before any advisory. The piece taxonomizes 'silent patch gaps' and why AI-assisted diffing makes them cheap to mine.
vulnerability · yeswehack.com
The Cybersecurity Act: Strengthening coordinated vulnerability disclosure at the European level
How the EU's 2019 Cybersecurity Act strengthens ENISA and ICT certification, and where coordinated vulnerability disclosure fits in Europe's policy landscape, from SPARTA to France's rules.
vulnerability · projectdiscovery.io
Introducing Neo Triage
On October 26, 2026 we're releasing Neo Triage, an autonomous engine for vulnerability triage. While other tools rank your backlog, Neo clears it.
Back