CISA'S JACK CABLE ON SECURE-BY-DESIGN PLEDGE PROGRESS — AND NEXT STEPS

Summary from the TLDR InfoSec newsletter

There has been positive progress on the secure-by-design pledge, which was launched in May and has now been signed by 248 companies who committed to implementing seven key digital security practices within a year of signing. The pledge focuses on improvements like expanding multi-factor authentication, reducing default passwords, and better vulnerability disclosure. Companies like Microsoft and Google are already showing significant progress through monthly technical exchanges and public reporting. While CISA plans to partner with a civil society organization to independently assess companies' progress and launch a website tracking their commitments, it won't remove companies who fail to meet goals - it will instead let their lack of progress be evident through an absence of public updates.