The 90 day disclosure policy is dead

This entry discusses the end of the 90-day vulnerability disclosure policy as reported in a blog post linked from a Reddit security community. It is a newsworthy commentary on disclosure practices rather than a specific security vulnerability or exploit. No technical vulnerability details, affected software versions, or exploit information are provided.

• blog.himanshuanand.com/2026/05/the-90-day-disclosure-policy-is-dead/ (opens in a new tab)
• reddit.com/r/ExploitDev/comments/1u5thfa/the_90_day_disclosure_policy_is_dead/ (opens in a new tab)

• [Open Source] OshoosiClaw (v1.2.0): A decentralized, autonomous EDR and AI agent containment engine in Rust. Looking for devs and pentesters to help break it.News2026-10-21
• on my way to become malware analystAnalysis2026-10-20
• pwn.collegeNews2026-10-16
• Sudocrypt v16.0 is back! Our international CTF is happening this OctoberNews2026-10-16
• VigilOSS · Harness to help hunt for bugs in a structured smart wayNews2026-10-16