PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

What you need to know about H.R. 872

bugcrowd.com | blog | #supply-chain | #vdp | #vulnerability-disclosure | #policy | #legislation | #hr-872 | #united-states | #procurement
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

The House-approved H.R. 872 would mandate VDP adoption by federal cyber contractors through DFARS procurement rules, extending the Hack the Pentagon and BOD 20-01 model across the supply chain.
Published
Collected

Related coverage

blog · bugcrowd.com
New Wave of Legislation Puts Crowdsourced Cybersecurity in the Spotlight
A 2022 wave of US cybersecurity laws—over 250 state bills plus federal mandates requiring 72-hour incident and 24-hour ransomware payment reports to CISA—puts crowdsourced security in the spotlight.
blog · hackerone.com
Report Smarter, Not Harder: HackerOne's Case for Better CIRCIA Rules
This coverage gives security teams current context for monitoring, validation, and remediation.
blog · hackenproof.com
Vulnerability Disclosure Policy: A Guide for Business Leaders
Explains what a vulnerability disclosure policy is and why the EU CRA and NIS2 now make it a compliance expectation, then walks through the key decisions behind each policy section, offering a free template for security and legal teams to adapt.
blog · certik.com
CLARITY Act Stalls as Regulators Move Ahead
The Senate released a 616-page CLARITY Act draft, but the bill stalled before the August recess amid disputes over ethics provisions, illicit-finance loopholes and banking opposition.
blog · wiz.io
What the U.S. AI Action Plan Means For Cyber Defenders
Wiz reads the U.S. AI Action Plan for cyber defenders: accelerating AI adoption and building infrastructure also widens the attack surface, so it pairs speed with security foundations and governance.
vulnerability · hackerone.com
VDPs Are Good For the Government — and Good For Business
The Federal Cybersecurity Vulnerability Reduction Act would require federal contractors to implement VDPs, extending a proven disclosure practice across the government supply chain.
Back