PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

The Cybersecurity Act: Strengthening coordinated vulnerability disclosure at the European level

yeswehack.com | vulnerability | #vulnerability-disclosure | #enisa | #cvd | #sparta | #cybersecurity-act | #eu-policy
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

How the EU's 2019 Cybersecurity Act strengthens ENISA and ICT certification, and where coordinated vulnerability disclosure fits in Europe's policy landscape, from SPARTA to France's rules.
Published
Collected

Related coverage

blog · aikido.dev
Cyber Resilience Act is here! Myth busting and first impressions
Aikido Security's first impressions of the EU Cyber Resilience Act's first reporting deadline, covering the new Single Reporting Platform, its 24/72-hour and 14-day timelines, and compliance myths.
vulnerability · yeswehack.com
CVE-2023-54391 and beyond: excavating silent patches and the attacker-defender information gap
CVE-2023-54391: a Proxmox VE auth bypass fixed silently in 2023, exploited in 2026 before any advisory. The piece taxonomizes 'silent patch gaps' and why AI-assisted diffing makes them cheap to mine.
vulnerability · yeswehack.com
EUCC cyber certification scheme enters early adopter phase after vulnerability disclosure rules issued
The EU Common Criteria (EUCC) certification scheme enters its early adopter phase; ENISA's disclosure rules cite Bug Bounty programs and VDPs as best practice for certificate holders.
vulnerability · yeswehack.com
The first live Bug Bounty for European scale-ups and unicorns
YesWeHack and partners Doctolib, BlaBlaCar, Malt and SPARTA launched 'Hack Me I'm Famous', billed as the first live Bug Bounty for European scale-ups, gathering around 50 top hackers.
vulnerability · yeswehack.com
Coordinated Vulnerability Disclosure policy for a safer cyberspace
Argues coordinated vulnerability disclosure needs clear legal guidelines to thrive, noting fragmented EU interpretations of hacking and outlining how policy can make researcher reporting safer.
vulnerability · yeswehack.com
A framework for successful vulnerability disclosure policy
A YesWeHack framework for coordinated vulnerability disclosure tackling legal, awareness and communication barriers, with infographics to help organizations build a workable reporting process.
Back