UK plans for cybercrime law reform would protect almost no one, experts warn

The UK's proposed cybercrime law reform would leave nearly all individuals and organizations unprotected, according to experts¹. The planned legislation would compel researchers to immediately halt their activities upon identifying a vulnerability, thereby preventing them from verifying its existence, evaluating its severity, or determining its potential for exploitation. This restriction would severely hinder the ability of security professionals to assess and address vulnerabilities, ultimately putting users at greater risk. The proposed reform's limitations would also stifle the discovery and disclosure of critical vulnerabilities, such as those identified by CVE numbers, which are essential for informing patches and updates from vendors. So what matters to practitioners is that these proposed reforms would undermine the very foundations of cybersecurity research and vulnerability management, making it more challenging to protect against cyber threats.