Google Ditches Patch-Time Bug Disclosure in Favor of 90-Day Policy
Google Project Zero shifted its vulnerability disclosure policy away from patch-time requirements to a standardized 90-day deadline, according to Threatpost. Casey Ellis analyzed the implications of the policy change and its effects on the vulnerability disclosure landscape.
Source description, as published
Reports on Google Project Zero's decision to alter its 90-day vulnerability disclosure deadline, with Casey Ellis providing analysis on the policy change.