Notification and remediation

  • Industrial devices → operators, vendors, sector CERTs, regulators

  • Smart home / consumer devices → vendors, ISPs, consumer CERTs, takedown teams

  • No direct end-user contact