Trump’s Cyber EO Changes Secure Software Rules — VDPs Stay

The article reviews recent U.S. cybersecurity developments: CISA issued an advisory about ransomware exploiting a utility billing software vulnerability, banks raised concerns about agency cybersecurity, and the Trump Administration released an Executive Order that rescinds some validation and reporting requirements for secure software self-attestations while retaining the attestation and VDP requirements. It emphasizes the ongoing importance of vulnerability disclosure programs and recommends legislation (the Federal Contractor Cybersecurity Vulnerability Reduction Act) to ensure VDPs remain a baseline for federal contractors.