English (United Kingdom)

https://curated-unify.zendy.io/wp-json/zendy-region/v1/featured_content/oa?rat=en

https://curated-unify.zendy.io/wp-json/zendy-region/v1/highlighted_journal/

Global: Zendy Plus annual

Presents the access of premium content as premium feature

Premium Content

Presents the keyphrase highlighting as premium feature

Keyphrase Highlighting

Presents the summarisation as premium feature

Summarisation

Insights

Presents the pdf analysis as premium feature

PDF Analysis

Presents the zaia usage as premium feature

ZAIA

Global: Zendy Plus monthly

Global: Zendy Tools annual

Global: Zendy Tools monthly

Global: Zendy Free Plan

It is a public secret that doing email securely is fraught with challenges.We found a vulnerability present at many email providers, allowing us to spoofemail on behalf of many organisations. As email vulnerabilities are ten apenny, instead of focusing on yet another email vulnerability we ask adifferent question: how do organisations react to the disclosure of such asecurity issue in the wild? We specifically focus on organisations from thepublic and critical infrastructure sector who are required to respond to suchnotifications by law. We find that many organisations are difficult to reachwhen it concerns security issues, even if they have a security contact point.Additionally, our findings show that having policy in place improves theresponse and resolution rate, but that even with a policy in place, half of ourreports remain unanswered and unsolved after 90~days. Based on these findingswe provide recommendations to organisations and bodies such as ENISA to improvefuture coordinated vulnerability disclosure processes.

Your Vulnerability Disclosure Is Important To Us: An Analysis of Coordinated Vulnerability Disclosure Responses Using a Real Security Issue