PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

NIS 2 in force, Cyber Resilience Act adopted, CISA hails VDP impact – OffSec roundup for CISOs

yeswehack.com | blog | #bug-bounty | #compliance | #vdp | #nis2 | #ciso | #cyber-resilience-act | #roundup
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

CISO roundup: NIS 2 now in force and the Cyber Resilience Act adopted; cyber-skills shortage drives security-services spending; CISA hails VDP impact; TeamViewer's Bug Bounty story.
Published
Collected

Related coverage

blog · yeswehack.com
Tackling tech sprawl, CISO burnout, NIS 2 now enforceable – OffSec roundup for CISOs
CISO roundup: Forrester's 2025 priorities on supply-chain security and tech sprawl, CISO burnout, Malta's national VDP debate, and NIS 2's global implications.
blog · hackenproof.com
Vulnerability Disclosure Policy: A Guide for Business Leaders
Explains what a vulnerability disclosure policy is and why the EU CRA and NIS2 now make it a compliance expectation, then walks through the key decisions behind each policy section, offering a free template for security and legal teams to adapt.
blog · yeswehack.com
Clock ticking on Cyber Resilience Act compliance, Bug Bounty forecasts, intriguing CISA red team find – OffSec roundup for CISOs
CISO roundup: EU Cyber Resilience Act published, starting a 36-month compliance countdown; Bug Bounty market forecast to grow ~16% CAGR to $4.95bn by 2032; plus a CISA red team case study.
blog · yeswehack.com
NIS 2 in brief, security tech hype cycle, Italy’s first ever live Bug Bounty – OffSec roundup for CISOs
CISO roundup: ten need-to-know NIS 2 facts before the 17 October deadline, Gartner's Security Operations Hype Cycle, and Gal Nagli interviewed at the Louis Vuitton live event.
blog · aikido.dev
Cyber Resilience Act is here! Myth busting and first impressions
Aikido Security's first impressions of the EU Cyber Resilience Act's first reporting deadline, covering the new Single Reporting Platform, its 24/72-hour and 14-day timelines, and compliance myths.
vulnerability · yeswehack.com
OpenAI VDP for bugs found by AI, CVE funding fears persist, ‘shift left’ towards vulnerability overload – OffSec roundup for CISOs
Roundup: OpenAI's outbound VDP for bugs found by its AI, persistent CVE/NVD funding fears, 'shift left' vulnerability overload, and why Mikko Hyppönen now focuses on drones.
Back