Vulnerability Equities Process

Should governments keep vulnerabilities secret?

Posted on August 1, 2017 by Taylor Armerding

The ‘secret vulnerability stash’ debate rages on. Continue reading Should governments keep vulnerabilities secret?→

Policy Experts Push To Make Vulnerability Equities Process Law

Posted on February 23, 2017 by Tom Spring

By making the Vulnerability Equities Process law, advocates of the idea argue there would be more reliability, transparency and accountability in the process of government vulnerability disclosure. Continue reading Policy Experts Push To Make Vulnerability Equities Process Law→

For the First time, FBI discloses a Flaw to Apple, but it’s already Patched!

Posted on April 27, 2016 by Mohit Kumar

In Brief
The Federal Bureau of Investigation (FBI) made its first disclosure about a software security flaw to Apple under the Vulnerability Equities Process (VEP), a White House initiative created in April 2014 for reviewing flaws and deciding which ones should be made public.

Unfortunately, the vulnerability reported by the federal agency only affected older versions of Apple’s iOS and OS

Continue reading For the First time, FBI discloses a Flaw to Apple, but it’s already Patched!→