Please update your contact information with us by checking the Updating Vendor Contact Information page. For information on setting up PGP, please see PGPtempSee Sending Sensitive Information for our PGP key and further guidance on using PGP.
If you've received a notification from us, first, our Verifiying a CERT/CC Notification Message page will provide information on how to verify you have received a real notification from us. Then, please see our Working with the CERT/CC page will provide information on what we expect.
If you'd like to set up a security team at your organization to handle vulnerability reports and coordination and disclosure, please see Standards and Best Practices for Vulnerability Coordination and Disclosure.