Google’s Project Zero backs off a bit – will now give up to 14 days’ grace

The debate continues around zero-day vulnerabilities and how they should be reported and addressed.  Google has backed off a bit from their initial strict 90-day for remediation and reporting.  Regardless of which side of this argument you support, the debate is worthwhile and is moving the patch process forward for critical software.

https://nakedsecurity.sophos.com/2015/02/16/googles-project-zero-backs-off-a-bit-will-now-give-up-to-14-days-grace/

#Google #Microsoft #Patching #Zeroday