UK PSTI Act: ‘World first’ IoT security rules offer reminder of VDP virtues

The article summarizes the UK Product Security and Telecommunications Infrastructure (PSTI) Act, effective 29 April, which requires IoT manufacturers to publish clear vulnerability-reporting contact details, ban easily guessable default passwords, and commit to minimum security update end-dates; it also advocates Vulnerability Disclosure Policies (VDPs) and related services and best practices to help vendors comply and improve device security.