Pentagon formally launches vulnerability disclosure program for defense companies

The Defense Department is launching a cyber vulnerability disclosure program for the defense industrial base, following a 12-month pilot conducted in partnership with HackerOne.

The program is a “strategic partnership” between the Department of Defense Cyber Crime Center (DC3) and the Defense Counterintelligence and Security Agency known as DIB-VDP, according to an April 19 release.

The release says, “This free and voluntary DIB-VDP aims to bring vulnerability disclosure capabilities to the DIB, and the strategic alignment will further enhance...