The Secureworks® Threat Intelligence Executive Report (Volume 2023, Number 2) highlights a key aspect of the U.S. National Cybersecurity Strategy announced during the report period: the proposal to shift legal liability for software security bugs from users to software vendors. This shift aims to improve overall cybersecurity by holding software companies accountable for insecure products rather than allowing them to disclaim liability by contract. Although this approach could significantly enhance security for customers by motivating vendors to adopt better secure development practices, its implementation faces challenges.

Join for free to read