Tagged:
vulnerability-disclosure2 posts
-
Coordinated Vulnerability Disclosure for AI Models — A Field Still Making Its Rules
Traditional CVD is well-established for software vulnerabilities. AI models break nearly every assumption it rests on. Here's where the security community stands — and what a workable disclosure framework might look like.
-
When AI Finds Your Bugs, Should You Hide the Code?
The UK's Government Digital Service published guidance that Terence Eden — who helped craft the NHS's original open-source policies — read as a pointed public rebuke of NHS England's decision to close nearly 200 open-source repositories in response to AI-assisted vulnerability discovery. What this dispute reveals about a wider security misunderstanding.