UK Product Security and Telecommunications Infrastructure (Security Requirements for Relevant Connectable Products) Regulations 2023

Information on minimum security update periods

For details on the minimum security update period for your product please refer to the table below

Product Description (Model Number)

Minimum Security Update Period

PlayStation 5 (CFI-2016, CFI-1216A, CFI-1216B, CFI-1116A, CFI-1116B, CFI-1016A, CFI-1016B)

April 2025

PlayStation 4 (CUH-2216A, CUH-2216B)

April 2025

PlayStation Portal Remote Player (CFI-Y1016)

April 2025

Pulse Elite Wireless Headset (CFI-ZWH2)

April 2025

Pulse Explore Wireless Earbuds (CFI-ZWE1)

April 2025

Information on how to report security issues

Sony Interactive Entertainment supports both the PlayStation bug bounty program for certain PlayStation products and the Sony Global security program for all other Sony assets not covered by the PlayStation bug bounty program.

To find out which products are included in the PlayStation bug bounty program, please visit

You can submit a vulnerability report for eligible PlayStation products at For all other Sony assets, please report it through Secure@Sony

You will receive acknowledgement of a reported security issue within 5 business days and status updates will be provided until the resolution of a reported security issue within 30 business days.