The following podcast contains advertising.

To access an ad-free version of the Lawfair Podcast,

become a material supporter of Lawfair at Patreon.com slash Lawfair. That's Patreon.com

slash Lawfair. Also check out Lawfair's other podcast offerings, rational security, chatter, lawfare no bull, and the aftermath.

May I have your attention please you can now book your train tickets on Uber and

get 10% back in credits to spend on your next Uber ride.

So you don't have to walk home in the rain again.

Trains now on Uber.

T's and C's apply.

Check the Uber app. One thing we've noticed at CISA and others have noticed too is that right now if you look at the list of

CBEs that the most impactful vulnerabilities, CISA also publishes the

the known exploited vulnerabilities list which shows which vulnerabilities we know have been leveraged in cybersecurity incidents.

It's very hard I've tried myself to actually learn from this

what the most common causes of these vulnerabilities are and even more so how these are tied to

cyber security incidents in the wild.

I'm Paul Rosenswain, contributing editor of Law Fair, and this is the Law Fair podcast, December 22nd,

2023. Our topic today is software liability. It's generated by President Biden's cybersecurity

strategy which proposes to impose liability on those who manufacture

software with code problems within it.

I sat down with Lauren Zabriac, Bob Lord, and Jack Cable, who are senior advisors in the Cybersecurity and Infrastructure

Security Agency at the Department of Homeland Security, who are the go-to people on the topic of what it means to design secure software code.

And as part of Law Affairs's ongoing project to understand what secure by design might mean in practice,

...