Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Mobilising collective intelligence for better security

yeswehack.com | vulnerability | #bug-bounty | #vulnerability-disclosure | #cvd | #security-txt | #cert | #coordination | #zerodisclo

Summary

How to enable 'first contact' in coordinated vulnerability disclosure — via CERTs, security.txt, ZeroDisclo.com and bug bounty — so researchers report bugs instead of going public.
Published
Collected

original ↗

Related coverage

  1. ZeroDisclo.com: Vulnerability disclosure done right (yeswehack.com)
  2. Coordinated Vulnerability Disclosure policy for a safer cyberspace (yeswehack.com)
  3. A framework for successful vulnerability disclosure policy (yeswehack.com)
  4. Roles and responsibilities for efficient vulnerability disclosure (yeswehack.com)
  5. The Cybersecurity Act: Strengthening coordinated vulnerability disclosure at the European level (yeswehack.com)
  6. Incentive Policy for Coordinated Vulnerability Disclosure (yeswehack.com)

back