CISA director pushes for vendor accountability and less emphasis on victims’ errors

Cybersecurity Dive April 25, 2024
Matt Kapko

Stakeholders need to address why vendors are delivering products with common vulnerabilities, which account for the majority of attacks, Jen Easterly said.

The U.S. government and its partners have slowed the swell of ransomware over the last three years, Jen Easterly, director of the Cybersecurity and Infrastructure Security Agency, said Wednesday at an event.

But the cyclical and persistent threat ransomware poses requires new ways of thinking, Easterly said, speaking at the Institute for Security and Technology’s annual ransomware task force event. Defenders and stakeholders have to turn the lens to software and hardware vendors, according to Easterly.

“There’s a lot about the villains. There’s a lot about victims. We do not talk enough about vendors,” she said.

“The way...

Today's Sponsors

Today's Sponsor