Google Project Zero Announces New Disclosure Policy

Google Project Zero announces a new vulnerability disclosure policy starting today with a 90-day window, moving to 60 days on February 2, 2027, and 30 days on January 3, 2028, to address faster AI-assisted exploitation. The policy removes most special cases except for actively exploited, public, or vendor-requested vulnerabilities, aiming to encourage faster remediation by vendors.