Between Two Nerds: Is 39 US government-discovered vulnerabilities a lot?

Presented by

In this edition of Between Two Nerds, Tom Uren and The Grugq talk about the United State’s Vulnerabilities Equities Program, which balances the need for intelligence collection with need to protect the public. The government recently revealed that in 2023 it released 39 vulnerabilities, but what does this really tell us?

Show notes:

• The unclassified VEP appendix at https://www.wyden.senate.gov/imo/media/doc/fy23_unclassified_vep_annual_reportpdf.pdf
• Kim Zetter’s Zero Day article https://www.zetter-zeroday.com/u-s-government-disclosed-39-zero-day-vulnerabilities-in-2023-per-first-ever-report/