As concerned cybersecurity experts who have dedicated our lives to improving the security of the online environment, we urge you to reconsider the vulnerability disclosure requirements under the proposed EU Cyber Resilience Act (CRA). While we appreciate the CRA’s aim to enhance cybersecurity in Europe and beyond, we believe that the current provisions on vulnerability disclosure are counterproductive and will create new threats that undermine the security of digital products and the individuals who use them.

Download Full Text Below

Read Next

To Australia: Cybersecurity Is Foundational to the Duty of Care

The Center strongly supports Australia’s goal of protecting users from online harms. These recommendations are critical to ensuring that the effort to protect users does not inadvertently have the contrary effect of weakening online protections. 

Securing Super Intelligence Requires Protecting Good-Faith Security Research

HPC encourages the Task Force to consider two priorities as it begins its work: (1) ensure its recommendations protect legitimate security research, and (2) directly engage with HPC and the security research community as key stakeholders.

Better Identity Coalition Releases Best Practices for Digital Credential Data Use

VDCs have the potential to improve security, privacy, usability, and inclusivity for individuals and businesses if they are designed, deployed, and used responsibly. However, the introduction of government-issued VDCs also carries the risk of eroding