Chinese Law Demands Disclosure of Vulnerabilities

China has implemented a law that requires tech companies operating in the country to report hackable flaws in their products to the Ministry of Industry and Information Technology within two days. This information is then shared on the National Vulnerability Database, which subsequently distributes it to various government bodies. There is concern that this law puts firms in a difficult position as patching vulnerabilities takes longer than the two-day disclosure deadline.