The recent proposals around software liability, including the Cyber Resilience Act (CRA) in Europe and the National Cybersecurity Strategy (NCS) in the US, have sparked debates about accountability, especially among the open-source community. Supporters believe that liability could enhance security practices, directly holding companies responsible for insecure software. However, critics argue that such proposals oversimplify the complexity of cybersecurity and may hinder innovation. To address these concerns, policymakers must determine what constitutes a reasonable level of security and how much liability should cost.

Alleged Iranian hackers target victims in Saudi Arabia with new spying malware
Iran-based hacking group APT34 has launched a new cyber espionage operation, according to cybersecurity firm Trend Micro. The group has been infecting victims with the