{"slug": "policy-and-disclosure-2026-edition", "title": "Policy and Disclosure: 2026 Edition", "summary": "Google's Project Zero is shortening its vulnerability disclosure timeline, moving away from the \"90 + 30\" policy it has followed since 2021, because AI-assisted vulnerability discovery and exploitation has made the existing remediation window insufficient. The team said LLMs have increased the speed at which attackers can find and exploit vulnerabilities and raised the risk that multiple parties, including malicious ones, discover the same bug, making a vulnerability reported today a much higher immediate risk to users than one reported last year. Project Zero said it is crucial that vendors move toward remediating vulnerabilities faster.", "body_md": "Since 2021, Project Zero has followed a “90 + 30” vulnerability disclosure policy, allowing vendors up to 90 days to remediate a vulnerability plus an extra 30 days “soak time” for patch rollout. Our goal was to encourage faster patching and give vendors time to deliver patches to users. The advent of AI-assisted vulnerability discovery and exploitation has changed the threat landscape such that the vulnerability remediation timeline encouraged by our disclosure policy is clearly insufficient. LLMs have increased the speed at which attackers can find and exploit vulnerabilities, alongside the risk that multiple parties, including malicious ones, discover the same bug. A vulnerability reported today presents a much higher immediate risk to users than one reported last year. In this new environment, it is crucial that vendors move towards remediating vulnerabilities faster.", "url": "https://wpnews.pro/news/policy-and-disclosure-2026-edition", "canonical_source": "https://projectzero.google/2026/11/disclosure-policy.html", "published_at": "2026-11-13 08:00:00+00:00", "updated_at": "2026-11-13 17:23:56.906709+00:00", "lang": "en", "topics": ["ai-safety", "ai-policy"], "entities": ["Project Zero", "Google", "LLMs"], "also_reported_by": [], "alternates": {"html": "https://wpnews.pro/news/policy-and-disclosure-2026-edition", "markdown": "https://wpnews.pro/news/policy-and-disclosure-2026-edition.md", "text": "https://wpnews.pro/news/policy-and-disclosure-2026-edition.txt", "jsonld": "https://wpnews.pro/news/policy-and-disclosure-2026-edition.jsonld"}}