coordinated vulnerability disclosure

Atlantic Council - It takes a village: How hacktivity can save your company

2018 : Atlantic Council release its comic It takes a village: How hacktivity can save your company.

"Sandra’s story aims to promote a better understanding of CVD practices among policymakers and business leaders, as well as address the misperception of CVD as a catch-all solution...Read more

The CERT Guide to Coordinated Vulnerability Disclosure

2017/08 : The CERT publishes there Guide to Coordinated Vulnerability Disclosure.

This artefact is part of the CERT CC Bundle.Read more

Coordinated Vulnerability Disclosure Reloaded (Microsoft)

2011/04/19 : Microsoft reloaded its Coordinate Vulnerability Disclosure.

This artifact is part of the Microsoft Vulnerability Disclosure Bundle.Read more

ISO/IEC 29147:2014

2014/02 : "ISO/IEC 29147:2014 gives guidelines for the disclosure of potential vulnerabilities in products and online services. It details the methods a vendor should use to address issues related to vulnerability disclosure." (see : https...Read more

How long can a Mac survive the hacker Jungle ? (on PWN to OWN contest)

2007/03/26 : Ryan Naraine writes about the PWN to OWN contest.

"At this year's CanSecWest 2007 conference in Vancouver, BC, a "PWN to OWN" contest will pit security researchers against a MacBook Pro in an experiment to see how well a default Mac OS X install can survive...Read more

Google Project Zero

2015/02/13 : "Project Zero has adhered to a 90-day disclosure deadline. Now we are applying this approach for the rest of Google as well. We notify vendors of vulnerabilities immediately, with details shared in public with the defensive community after 90 days, or sooner if the vendor releases a...Read more

‘We Got to Be Cool About This‘: An Oral History of the L0pht (Part One - Fisher paper)

2018/03/06 : Dennis Fisher gives us an Oral History of the LØpht in four parts. This is the first part. 

"L0pht [was] one of the more influential hacker crews of the last 25 years. They were the varsity." 

Click here to read...Read more

Coordinated Vulnerability Disclosure: Bringing Balance to the Force (Microsoft)

2010/07/22 : "Today on the MSRC [Microsoft Security Response Center] blog, Matt Thomlinson, General Manager of Trustworthy Computing Security, announced our new philosophy on Coordinated...Read more

FIRST updates guidelines for multi-party vulnerability disclosure (Haworth Paper)

2020/05/18 : Jessica Haworth writes on FIRST updates guidelines for multi-party vulnerability disclosure.

This artifact is part of the FIRST Vulnerability Disclosure Bundle.Read more

Subscribe to coordinated vulnerability disclosure