CISA director: US is 'not afraid' to shout about Big Tech's security failings

CISA Director Jen Easterly discussed the fallout and lessons from the CSRB’s scathing report on Microsoft’s Exchange Online breach, emphasizing that while Microsoft cooperated and has since prioritized security, the CSRB still lacks subpoena power to compel future cooperation. She highlighted the Secure by Design pledge’s growing adoption and urged vendors to build safer products, citing Verizon’s DBIR to argue that improved default security—rather than faster patching alone—is essential to reduce major security events.