press Aug 1, 2020 · Threatpost
Google Ditches Patch-Time Bug Disclosure in Favor of 90-Day Policy
Google Project Zero shifted its vulnerability disclosure policy away from patch-time requirements to a standardized 90-day deadline, according to Threatpost. Casey Ellis analyzed the implications of the policy change and its effects on the vulnerability disclosure landscape.
Source description — as published
Reports on Google Project Zero's decision to alter its 90-day vulnerability disclosure deadline, with Casey Ellis providing analysis on the policy change.