Does Your Organization Have a Security.txt File?

guest · Sep 20, 2021

Does Your Organization Have a Security.txt File?
September 20, 2021
https://krebsonsecurity.com/2021/09/does-your-organization-have-a-security-txt-file/

It happens all the time: Organizations get hacked because there isn’t an obvious way for security researchers to let them know about security vulnerabilities or data leaks. Or maybe it isn’t entirely clear who should get the report when remote access to an organization’s internal network is being sold in the cybercrime underground.

In a bid to minimize these scenarios, a growing number of major companies are adopting “Security.txt,” a proposed new Internet standard that helps organizations describe their vulnerability disclosure practices and preferences.
Click to expand...

The security.txt file made available by USAA, for example, includes links to its bug bounty program; an email address for disclosing security related matters; its public encryption key and vulnerability disclosure policy; and even a link to a page where USAA thanks researchers who have reported important cybersecurity issues.

Having a security.txt file can make it easier for organizations to respond to active security threats.
Click to expand...

Log in or Sign up

Does Your Organization Have a Security.txt File?

guest Guest

Log in or Sign up

Does Your Organization Have a Security.txt File?

guest Guest

Useful Searches