Two former administration officials with knowledge of the request described the directive as a departure from typical cybersecurity protocols. The officials indicated that the desire to keep vulnerabilities hidden from the manufacturer while briefing the executive branch was an unusual move for the agency's security division.
