Software Security: Too Little Vendor Accountability, Experts Say

The article discusses efforts to hold software vendors legally accountable for insecure products, using high-profile incidents—Progress Software's MOVEit breach (impacting 600+ organizations and exposing around 40 million records) and Okta-related attacks used as initial access vectors—to illustrate how licensing, contract language, and cyber insurance have limited vendor liability; it summarizes proposed standards of care and a developer safe-harbor approach while noting meaningful legislation is likely years away.