// #industry-norms

Apple's CVE Transparency Problem Is Also the Industry's CVE Transparency Problem

Apple routinely patches vulnerabilities without disclosing CVE IDs, adding them retroactively weeks later. This is criticised as a transparency failure. But Apple is not uniquely bad at this — it is doing what the industry's incentive structure rewards.