Cyber Risks · Krebs on Security

Highlights from the New U.S. Cybersecurity Strategy

Summary: The Biden administration released a national cybersecurity strategy calling for legislation that would stop software makers from disclaiming liability for insecure products, paired with an undefined safe harbor framework for companies that demonstrate secure development. The document names China as the broadest, most active, and most persistent threat to government and private sector networks, and calls for faster and more frequent disruption campaigns modeled on the 2021 Emotet botnet takedown, with expanded capacity at the National Cyber Investigative Joint Task Force.

Key Takeaway: Software vendors have long used contract law to shield themselves from liability for insecure products, and this strategy proposes to end that practice while offering a liability shield only to companies that meet a safe harbor standard the administration has not yet defined.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related