CISA Official Calls Early PHP Vulnerability Patches Dangerous
A Cybersecurity and Infrastructure Security Agency official criticized an unnamed company for releasing PHP vulnerability patches before an agreed-upon date, calling the decision “dangerous.” The episode highlights coordinated disclosure and patch-timing considerations for government contractors, but identifies no procurement action or new mandatory deadline.