GOOGLE PROJECT ZERO TO PUBLICLY ANNOUNCE BUGS WITHIN A WEEK OF REPORTING THEM

Summary from the TLDR InfoSec newsletter

Google's Project Zero vulnerability research team has announced that they will publicly disclose when they have discovered a vulnerability within a week of notifying vendors. This breaks from the longstanding norm of waiting 90 days for a fix and an additional 30 days post-patch before publishing technical details. Project Zero emphasized that it won't release technical details early, only broad information to help downstream dependents prepare for patching.