On 7 December 2023, the Australian Cyber Security Centre, in collaboration with the United States Cybersecurity and Infrastructure Security Agency (CISA), National Security Agency (NSA), Federal Bureau of Investigation (FBI), Canadian Centre for Cyber Security (CCCS), New Zealand National Cyber Security Centre (NCSC-NZ), Computer Emergency Response Team New Zealand (CERT NZ), and the United Kingdom's National Cyber Security Centre (NCSC-UK), jointly released cybersecurity guidance focused on secure-by-design memory-safe roadmaps. The publication advocates for a Secure-by-design approach, encouraging technology providers to proactively integrate cybersecurity into the design and development of their products, taking responsibility for their customers' security outcomes. The guidance specifically urges software manufacturers to prioritise design and implementation practices that minimise customer risk, emphasising the adoption of memory-safe programming languages in their products. Additionally, the publication calls on software manufacturers to develop and publish memory-safe roadmaps, outlining plans to eliminate memory safety vulnerabilities in their products.
Original source