Sightings

Here is a partial list of places The CERT Guide to Coordinated Vulnerability Disclosure has appeared.

2021-06-24 - See Something, Say Something: Coordinating the Disclosure of Security Vulnerabilities in Canada (Cyberspace Policy Exchange)

2019-09-17 - Update on the CERT Guide to Coordinated Vulnerability Disclosure - (Software Engineering Institute)

2018-12-14 - Economics of Vulnerability Disclosure (ENISA)

2018-10-23 - The Criticality of Coordinated Disclosure in Modern Cybersecurity (US House Energy and Commerce Committee, Majority Staff)

2018-10-10 - Announcing Arduino’s Coordinated Vulnerability Disclosure Policy (Arduino)

2018-09-18 - It Takes a Village: How Hacktivity Can Save Your Company (Atlantic Council)

2018-07-26 - SEI Response to Senate and House Committees regarding Coordinated Vulnerability Disclosure (Software Engineering Institute)

2018-07-17 - Letter to SEI from House Committee on Energy and Commerce and Senate Committee on Commerce, Science, and Transportation regarding Coordinated Vulnerability Disclosure (US House & Senate)

2018-07-11 - Senate Testimony regarding Complex Cybersecurity Vulnerabilities: Lessons Learned from Spectre and Meltdown (Art Manion's testimony to the US Senate)

2018-06-28 - Software Vulnerability Disclosure in Europe: Technology, Policies and Legal Challenges (Centre for European Policy Studies)

2018-02-07 - Response to US House Energy and Commerce Committee regarding Meltdown and Spectre (Microsoft)

2018-01-31 - Response to US House Energy and Commerce Committee regarding Meltdown and Spectre (Intel)

2017-11-28 - AMA with Authors of The CERT Guide to Coordinated Vulnerability Disclosure (HackerOne)

2017-10-26 - Your TL;DR Summary of the CERT Guide to Coordinated Vulnerability Disclosure (HackerOne)

2017-08-16 - This one matters, too: Carnegie Mellon issues guide to disclosing software vulnerabilities responsibly (cyberscoop)

2017-08-15 - CERT Guide to Coordinated Vulnerability Disclosure Released (Software Engineering Institute)