CISA boss: Secure code is the 'only way to make ransomware a shocking anomaly'

At RSAC, CISA Director Jen Easterly—joined by former director Chris Krebs—called for making technology “secure by design” to curb ransomware and systemic cyber risk, citing recent events (UnitedHealth’s $22M payment, U.S. action against a suspected LockBit leader, intrusions by groups like Volt Typhoon, and compromises of Microsoft cloud accounts) and previewing a multi-vendor pledge to build more secure products; they emphasized procurement pressure, litigation (e.g., SEC/SolarWinds), regulation (e.g., sector task forces), and legislation (CIRCIA, EU AI Act and Cyber Resilience Act) as levers to raise security standards.