Some of the Internet's critical vulnerabilities were exposed last weekend, as a ransomware attack took unpatched systems by surprise. These vulnerabilities put users and businesses at significant risk, disabling computer systems at hospitals and businesses around the world.

The Vulnerabilities Equities Process (VEP) is the U.S. government's process for reviewing and coordinating the disclosure of new vulnerabilities it learns about. The VEP remains shrouded in secrecy, and is in need of process reforms to ensure transparency, accountability, and oversight.