Google's Project Zero has announced a new "Full X" vulnerability disclosure policy that will progressively shorten the public disclosure window from 90 days to 30 days. The policy takes effect immediately as "Full 90," transitioning to 60 days on February 2, 2027, and ultimately to 30 days by January 3, 2028.
The update abolishes the previous "90+30" framework along with grace period and variant rules, leaving only three exceptions: vulnerabilities already exploited in the wild, those whose details have been publicly disclosed elsewhere, and cases where vendors proactively request publication. Project Zero cited AI's accelerating impact on both vulnerability discovery and exploitation as the primary driver behind the tightened timeline.
Google's Project Zero Cuts Vulnerability Disclosure Deadline to 30 Days by 2028
Aviso legal: El contenido de Phemex News es únicamente informativo.No garantizamos la calidad, precisión ni integridad de la información procedente de artículos de terceros.El contenido de esta página no constituye asesoramiento financiero ni de inversión.Le recomendamos encarecidamente que realice su propia investigación y consulte con un asesor financiero cualificado antes de tomar cualquier decisión de inversión.