CISA boss: Makers of insecure software must stop enabling today's cyber villains

CISA Director Jen Easterly, in an mWise keynote, called on software vendors to take responsibility for insecure code by prioritizing secure-by-design practices and reframing vulnerabilities as product defects; she urged buyers to use procurement power, highlighted that nearly 200 companies have signed the Secure by Design pledge, and announced new CISA guidance to evaluate vendors, while discouraging the glamorization of cybercrime groups.