Organizations without vulnerability disclosure policies failing to address researchers’ security warnings

Up to a third of all security flaws reported to organizations with no vulnerability disclosure policy (VDP) are not being patched due to failings in the disclosure process, a new report suggests.