Tech giants propose standard for end-of-life security disclosures

A coalition of big tech vendors, including Cisco, Microsoft, Dell, IBM, Oracle, and Red Hat has published a draft ‘OpenEoX’ framework to standardise the way companies announce when products will stop receiving security patches or any other form of support.

The draft standard, released through the OASIS standards body, argues that today’s end-of-life (EoL) notices are scattered, inconsistently worded and hard to track, causing major problems for organizations running obsolete software or hardware without understanding the expanded security risk.

Read more at Security Week