CISA and International Partners Release Vulnerability Disclosure Guidance for Software Manufacturers

CISA, in coordination with international partners, has published a guide to standardize how software manufacturers and service providers engage with security researchers. The guidance aims to formalize vulnerability disclosure programs to reduce the time between discovery and remediation, though adoption remains voluntary for private sector entities.