Google is implementing a new policy to publicly report vulnerabilities within one week of informing vendors, aiming to enhance transparency and prompt patching. This initiative, part of Reporting Transparency, will also share limited details about vulnerabilities early on to reduce the upstream patch gap and improve overall security. #Google #ProjectZero #ReportingTransparency #VulnerabilityDisclosure
Keypoints
- Google’s Project Zero team will start releasing limited vulnerability details within one week of vendor notification.
- The new policy aims to increase transparency and speed up patch adoption for end users.
- Detailed timing and affected products or open-source projects will be disclosed early, but technical details will remain confidential until the deadline.
- The initiative targets reducing the upstream patch gap, shortening the vulnerability lifecycle.
- Google emphasizes that early disclosures will not aid attackers, focusing instead on creating a safer ecosystem.
Read More: https://www.infosecurity-magazine.com/news/google-report-new-vulnerabilities/