One of the Biggest Mysteries in Cybersecurity: Why Don’t We Demand This?

The piece argues that the cybersecurity ecosystem suffers significantly because secure coding and threat modeling are rarely taught in programming curricula and are not required by most employers, despite the large share of compromises linked to preventable software vulnerabilities. Citing common flaw categories (e.g., buffer overflows, hard-coded credentials, input validation issues) and references such as OWASP, CISA KEV, and Mandiant estimates, the author urges academia to add or replace coursework with secure coding content and calls on employers to require secure coding proficiency as a baseline hiring criterion.