Score by collisions, patch by panic: defensive architecture for the post-90-day-disclosure era

This entry discusses a security-related blog post titled 'Score by collisions, patch by panic: defensive architecture for the post-90-day-disclosure era,' which addresses changes in vulnerability disclosure practices. The content is sourced from a Reddit NetSec post linking to an external blog, reflecting on the evolving landscape of patching and disclosure timelines. There are no specific vulnerabilities, affected software versions, or technical exploit details provided. No known exploits or patches are referenced. The severity is indicated as medium, likely reflecting the general importance of the topic rather than an immediate technical threat.

• blog.himanshuanand.com/2026/05/the-90-day-disclosure-policy-is-dead/ (opens in a new tab)
• reddit.com/r/netsec/comments/1tinwan/score_by_collisions_patch_by_panic_defensive/ (opens in a new tab)

• Critical RCE Alert: Full takeover of HashiCorp Vault and OpenBao. OpenBao is patched. Vault remains exposedCriticalVulnerability2026-09-29
• Stopping Remote Code Execution with Sandboxes, CVE-2026-115995: Rust ZipMediumVulnerability2026-10-29
• XML Signature Wrapping authentication bypass in Moldova's MPass SAML NuGet library, fixed in 10.0.4 (CVE requested, CAN-2026-2041077)MediumVulnerability2026-10-29
• New Kerberos Abuse Path Discovery - Constrained Delegation without Protocol Transition against SPN-less accountsNews2026-10-27
• The Gentlemen: A closer look at a not-so-gentle ransomware-as-a-service operationMalware2026-10-27