Kevin Beaumont on Nostr: Fortinet lecturing the industry about vulnerability disclosure best practices while ...

Fortinet lecturing the industry about vulnerability disclosure best practices while allocating many CVEs over a year late, regularly not disclosing vulnerabilities in release notes until up to a year later, not disclosing report timelines to customers, while making spelling errors is peak comedy. This is not a serious security vendor.