CISA Requires Critical Software to Eliminate C/C++ by 2026 to Address Memory Safety Vulnerabilities

Nov 4, 2024, 05:53 PM

The U.S. federal government has mandated that critical software must eliminate the use of C and C++ programming languages by 2026 to mitigate security risks associated with memory safety. The Cybersecurity and Infrastructure Security Agency (CISA) has emphasized the urgency of this requirement, highlighting the dangers posed by applications built with these languages, which are known for their memory safety vulnerabilities. The deadline is approaching, prompting discussions within the tech community about the implications of this directive and the growing issue of technical debt in software development.