Extracting vendor promises won't fix cybersecurity
Briefly

Jen Easterly expresses significant concern over the cyber security landscape, stating that the quality of software security has been poor, is poor, and will remain poor until industry stakeholders take accountability. She points out that many software vendors have pledged to improve their products by the next year, but questions the lack of consequences for those who may not deliver on such promises. This emphasis on accountability is crucial for real change in the cybersecurity space.
Easterly also criticizes the industry's tendency to glamorize cybercriminals by giving them appealing names. She argues that by labeling them with silly names like 'Evil Ferrets,' it diminishes their threat and importance. Instead of providing them with names that elevate their status, she suggests that they should be identified with long, boring numbers to drain their ego and put each cyber incident into perspective. This could shift the focus back to the severity of the issues rather than entertaining the personas of these criminals.
Read at Theregister
[
|
]