Sightings

Here is a partial list of places The CERT Guide to Coordinated Vulnerability Disclosure has appeared.

2021-06-24 - See Something, Say Something: Coordinating the Disclosure of Security Vulnerabilities in Canada (Cyberspace Policy Exchange)
2020-03-23 - The CERT Guide to Coordinated Vulnerability Disclosure (SEI Podcast)
2019-09-17 - Update on the CERT Guide to Coordinated Vulnerability Disclosure - (Software Engineering Institute)
2018-12-14 - Economics of Vulnerability Disclosure (ENISA)
2018-10-23 - The Criticality of Coordinated Disclosure in Modern Cybersecurity (US House Energy and Commerce Committee, Majority Staff)
2018-10-10 - Announcing Arduino's Coordinated Vulnerability Disclosure Policy (Arduino)
2018-09-18 - It Takes a Village: How Hacktivity Can Save Your Company (Atlantic Council)
2018-07-26 - SEI Response to Senate and House Committees regarding Coordinated Vulnerability Disclosure (Software Engineering Institute)
2018-07-17 - Letter to SEI from House Committee on Energy and Commerce and Senate Committee on Commerce, Science, and Transportation regarding Coordinated Vulnerability Disclosure (US House & Senate)
2018-07-11 - Senate Testimony regarding Complex Cybersecurity Vulnerabilities: Lessons Learned from Spectre and Meltdown (Art Manion's testimony to the US Senate)
2018-06-28 - Software Vulnerability Disclosure in Europe: Technology, Policies and Legal Challenges (Centre for European Policy Studies)
2018-02-07 - Response to US House Energy and Commerce Committee regarding Meltdown and Spectre (Microsoft)
2018-01-31 - Response to US House Energy and Commerce Committee regarding Meltdown and Spectre (Intel)
2017-11-28 - AMA with Authors of The CERT Guide to Coordinated Vulnerability Disclosure (HackerOne)
2017-10-26 - Your TL;DR Summary of the CERT Guide to Coordinated Vulnerability Disclosure (HackerOne)
2017-08-16 - This one matters, too: Carnegie Mellon issues guide to disclosing software vulnerabilities responsibly (cyberscoop)
2017-08-15 - CERT Guide to Coordinated Vulnerability Disclosure Released (Software Engineering Institute)