Supply Chain Security

For a long time, coordinated vulnerability disclosure depended on a rarely-spoken assumption: If a researcher privately reported a serious vulnerability, those handling it had...