The SEC is currently considering rules that would require all publicly traded companies to report a significant cyber incident to investors within four business days.
Instead of telling customers that the inexpensive Wyze Cam v1 had an egregious remote access vulnerability, the company decided never to patch it or tell anybody and Bitdefender apparently played along with it.
The CSRB will advise the President and Department of Homeland Security director, as well as review major security events starting with the Log4j exploits.