PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

US House passes bill mandating vulnerability disclosure policies for federal contractors

yeswehack.com | vulnerability | #cisa | #vdp | #vulnerability-disclosure | #nist | #us-policy | #federal-contractors
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

The US House passed a bill mandating VDPs for federal contractors, consistent with NIST guidelines; the roundup also covers the UK Home Office's own vulnerability disclosure policy launch.
Published
Collected

Related coverage

blog · bugcrowd.com
CISA’s VDP platform: Five years of collaborative defense
CISA’s VDP Platform marks five years with nearly 45,000 submissions and 5,300+ vulnerabilities fixed across 60+ federal agencies. See the key findings.
blog · hackerone.com
Report Smarter, Not Harder: HackerOne's Case for Better CIRCIA Rules
This coverage gives security teams current context for monitoring, validation, and remediation.
blog · hackenproof.com
Vulnerability Disclosure Policy: A Guide for Business Leaders
Explains what a vulnerability disclosure policy is and why the EU CRA and NIS2 now make it a compliance expectation, then walks through the key decisions behind each policy section, offering a free template for security and legal teams to adapt.
blog · wiz.io
Scan for Good: Using AI to discover and fix high-priority exposures across public services and critical infrastructure
Wiz's Scan for Good pairs AI scanning with human researchers to find public exposures in critical infrastructure and nonprofits, driving hundreds of fixes with Google DeepMind and CISA support.
vulnerability · yeswehack.com
CVE-2023-54391 and beyond: excavating silent patches and the attacker-defender information gap
CVE-2023-54391: a Proxmox VE auth bypass fixed silently in 2023, exploited in 2026 before any advisory. The piece taxonomizes 'silent patch gaps' and why AI-assisted diffing makes them cheap to mine.
vulnerability · yeswehack.com
OpenAI VDP for bugs found by AI, CVE funding fears persist, ‘shift left’ towards vulnerability overload – OffSec roundup for CISOs
Roundup: OpenAI's outbound VDP for bugs found by its AI, persistent CVE/NVD funding fears, 'shift left' vulnerability overload, and why Mikko Hyppönen now focuses on drones.
Back