PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Coordinated Vulnerability Disclosure policy for a safer cyberspace

yeswehack.com | vulnerability | #vulnerability-disclosure | #policy | #eu | #legal | #cvd | #cyberspace
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Argues coordinated vulnerability disclosure needs clear legal guidelines to thrive, noting fragmented EU interpretations of hacking and outlining how policy can make researcher reporting safer.
Published
Collected

Related coverage

vulnerability · yeswehack.com
A framework for successful vulnerability disclosure policy
A YesWeHack framework for coordinated vulnerability disclosure tackling legal, awareness and communication barriers, with infographics to help organizations build a workable reporting process.
vulnerability · yeswehack.com
Incentive Policy for Coordinated Vulnerability Disclosure
An explainer contrasting Coordinated Vulnerability Disclosure with 'responsible disclosure', arguing CVD keeps vendors and researchers cooperating, and outlining what an incentive policy should cover.
blog · yeswehack.com
We are SPARTAns: Re-imagining cybersecurity for the European Union
Introduction to SPARTA, the EU-funded cybersecurity competence network uniting 44 organisations across 14 member states — YesWeHack included — to advance European research and strategic autonomy.
blog · hackerone.com
Report Smarter, Not Harder: HackerOne's Case for Better CIRCIA Rules
This coverage gives security teams current context for monitoring, validation, and remediation.
vulnerability · yeswehack.com
CVE-2023-54391 and beyond: excavating silent patches and the attacker-defender information gap
CVE-2023-54391: a Proxmox VE auth bypass fixed silently in 2023, exploited in 2026 before any advisory. The piece taxonomizes 'silent patch gaps' and why AI-assisted diffing makes them cheap to mine.
vulnerability · yeswehack.com
The NIS 2 Directive is now enforceable: What are the implications for vulnerability management?
As NIS 2 becomes enforceable: most member states missed the transposition deadline, fines reach €10m or 2% of turnover, and what the changes mean for vulnerability management.
Back