Wait, security courses aren't a requirement to graduate with a computer science degree?

CISA senior advisor Jack Cable criticizes that 23 of the top 24 U.S. computer science programs do not require cybersecurity courses, arguing this contributes to insecure software, the skills gap, and persistent cyber threats. The article highlights a mismatch between industry hiring priorities and security needs, despite national policy pushing for greater accountability in software security. CISA has issued a Request for Information on incorporating security into CS education, with responses due February 20.