PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Sound policy for a vulnerable-by-default cyberspace

yeswehack.com | blog | #vulnerability-disclosure | #policy | #ethical-hacking | #governance | #cvd | #oecd
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

YesWeHack summarizes OECD guidance urging governments and organizations to adopt coordinated vulnerability disclosure policies, breaking the 'vulnerability taboo' and protecting ethical hackers legally.
Published
Collected

Related coverage

blog · hackerone.com
Report Smarter, Not Harder: HackerOne's Case for Better CIRCIA Rules
This coverage gives security teams current context for monitoring, validation, and remediation.
blog · ethiack.com
Pentesting no more: Why it's time to move from Pentesting to Ethical Hacking
Opinion piece: checklist-driven pentesting gives a false sense of security; the industry should move to continuous ethical hacking, as modeled by bug bounty and disclosure programs.
blog · netspi.com
Challenges and Keys to Success for Today’s CISO from the Former CISO at the CIA
Former CIA CISO Robert Bigman recounts building the agency's CISO role from scratch, why governance and policy work were core duties, and how to recover from mistakes in high-stakes environments.
blog · netspi.com
Building an Application Security Program from Scratch: Part 1
Kicks off a series on building an application security program, emphasizing policies, standards, and procedures as the foundation before tooling, with placement guidance in existing portfolios.
vulnerability · yeswehack.com
Coordinated Vulnerability Disclosure policy for a safer cyberspace
Argues coordinated vulnerability disclosure needs clear legal guidelines to thrive, noting fragmented EU interpretations of hacking and outlining how policy can make researcher reporting safer.
vulnerability · yeswehack.com
A framework for successful vulnerability disclosure policy
A YesWeHack framework for coordinated vulnerability disclosure tackling legal, awareness and communication barriers, with infographics to help organizations build a workable reporting process.
Back