As concerned cybersecurity experts who have dedicated our lives to improving the security of the online environment, we urge you to reconsider the vulnerability disclosure requirements under the proposed EU Cyber Resilience Act (CRA). While we appreciate the CRA’s aim to enhance cybersecurity in Europe and beyond, we believe that the current provisions on vulnerability disclosure are counterproductive and will create new threats that undermine the security of digital products and the individuals who use them.
Download Full Text Below
Read Next
Securing Super Intelligence Requires Protecting Good-Faith Security Research
HPC encourages the Task Force to consider two priorities as it begins its work: (1) ensure its recommendations protect legitimate security research, and (2) directly engage with HPC and the security research community as key stakeholders.
Better Identity Coalition Releases Best Practices for Digital Credential Data Use
VDCs have the potential to improve security, privacy, usability, and inclusivity for individuals and businesses if they are designed, deployed, and used responsibly. However, the introduction of government-issued VDCs also carries the risk of eroding
Across the Atlantic, Cyber Policy Is Running Into the Same Terminology Problem
The report covers Europe’s cybersecurity industry, investment landscape, and evolving cyber posture, but it also spends considerable time on a more basic question: what actually counts as “offensive cybersecurity” in the first place?
