The Cybersecurity Act: Strengthening coordinated vulnerability disclosure at the European level

This article explains how the EU Cybersecurity Act strengthens ENISA's role in promoting Coordinated Vulnerability Disclosure (CVD), outlines related legal provisions (notably Articles 6(b), 50, 54(1)(m), and 55), and highlights the involvement of stakeholders such as YesWeHack, national agencies, and CSIRTs/CERTs in fostering secure reporting channels and harmonized CVD practices across Member States.