FEDS WANT DEVS TO STOP CODING “UNFORGIVABLE” BUFFER OVERFLOW VULNERABILITIES

Summary from the TLDR InfoSec newsletter

Citing half a dozen CVEs, CISA and the FBI have released a scathing critique of manufacturers writing memory-unsafe code. They have urged organizations to adopt memory-safe languages such as Go, Rust, and Swift. Acknowledging that full rewrites are difficult, they have urged organizations to make plans for a phased transition and utilize memory safety flags and testing.