2026-07-10 07:30 UTC
The proposal explicitly suggests:
"It takes time for a #ZeroDay #vulnerability to be remedied through patches by manufacturers following publication by the Office for Information Security (#BSI); the Intelligence Service (#BND) can use this time to carry out important work. If the BSI is asked to share findings immediately, the time between internal processing, notification to manufacturers, patch provision & installation may be long enough to exploit it for valuable work."
Replies (1)
-
@CyReVolt@mastodon.social 2026-07-10 09:32
@ilumium@eupolicy.social I have mixed feelings. On one hand, has, this has potential for abuse, and OTOH, this is normal procedure for coordinated disclosure, as they describe - communicating with vendors, affected customers, etc..