Cyber leaders weigh in on proposed vulnerability disclosure policy

Security Magazine published this March 11, 2025 article, which gathers cybersecurity leaders' views on the proposed Federal Contractor Cybersecurity Vulnerability Reduction Act of 2025. Casey Ellis, founder of Bugcrowd, says the bill turns vulnerability disclosure policies and hacker feedback from optional extras into a mandatory procurement requirement, building on Hack the Pentagon.