# Makers of insecure software are the real cyber villains

- Link: https://smartnuts.com/2024/09/22/makers-of-insecure-software-are-the-real-cyber-villains/
- Veröffentlicht: 2024-09-22T15:43:20+02:00
- Autor: Michael Bunzel

You’re not used to hearing such strong words at snake-oil conferences. [But she said them in her keynote at Mandiant’s mWise conference – Jen Easterly, head of the Cybersecurity and Infrastructure Security Agency (CISA)](https://www.theregister.com/2024/09/20/cisa_sloppy_vendors_cybercrime_villains/),
an agency of the US government. And not being one to take prisoners or do things
by halves, she adds: “Even calling security holes ‘software vulnerabilities’ is 
too lenient. That phrase really diffuses responsibility. We should call them ‘product
flaws…'”

And she continues: “Despite a multi-billion-dollar cybersecurity industry, we still
have a multi-trillion-dollar software quality problem that leads to a trillion-dollar
global cybercrime problem.”

Also very nice: “We don’t have a cybersecurity problem, we have a software quality
problem. We don’t need more security products – we need more secure products.