Closing software-understanding gap is critical to national security, CISA says

The report highlights a critical “software understanding gap” that leaves U.S. critical infrastructure vulnerable to state-sponsored actors—particularly China and Russia—and urges decisive government action to improve comprehensive understanding of software-controlled systems. It calls for secure-by-design practices, expanded federal R&D (including DARPA and NSF initiatives), procurement and policy changes, public–private partnerships, and talent development to harden energy, transportation, telecom, and water systems against exploitation.