U.S. Cybersecurity and Infrastructure Security Agency is preparing to expand its vulnerability research and disclosure program. The program is now mandatory for nearly all executive branch agencies within the federal government. CISA will use Bugcrowd, EnDyna to host the vulnerability disclosure platform, which will provide a SaaS component to the platform. The White House has made cybersecurity a significant priority in the wake of several ransomware incidents, including the Colonial Pipeline Co. attack, and nation-state hacking campaigns that have affected portions of the government.”]
Source: https://www.govinfosecurity.com/cisa-expanding-mandatory-vulnerability-disclosure-program-a-16831