News Summary

• The Trump Administration has launched a new federal vulnerability coordination initiative.
• The effort is designed to bring government agencies, software developers, security researchers, and critical-infrastructure operators into a more coordinated process.
• The federal government does not need to replace the private sector’s security research ecosystem.
• It needs to make the ecosystem work better, particularly when a vulnerability affects widely used open-source software or infrastructure that crosses organizational boundaries.
• The urgency becomes clearer when the threat landscape is viewed at the level of an ordinary computer user.