Data from the Google-based team seems to reflect an industry getting faster at fixing bugs and deploying patches.

DHS follows in the footsteps of bug bounty initiatives for federal agencies that began in 2016.

CISA wants agencies to tackle nearly 300 flaws in all, ranging from within two weeks to six months.

The disclosure expands the number of devices that could be at risk due to the "BadAlloc" flaw.

Security issues in the IoT industry run deep, and a single vulnerability often affects multiple vendors.

For the second time in a week, security researchers have warned that extortionists exploited the critical flaw.