EMERGENCY MANAGEMENT association OF TEXAS

Today, June 24, 2025, the Cybersecurity and Infrastructure Security Agency (CISA) and the National Security Agency (NSA) release a joint guide on reducing memory related vulnerabilities in modern software development.  These vulnerabilities post serious risks to national security and critical infrastructure.  Memory safety vulnerabilities pose serious risks to national security and critical infrastructure.  Adopting memory safe languages (MSLs) offers the most comprehensive mitigation against this class of vulnerabilities and provides built-in safeguards that enhance security by design. 

CISA’s Secure by Design program advocates for integrating proactive security measures throughout the software development lifecycle, with MSLs as a central component.

This joint guide outlines key challenges to adopting MSLs, offers practical approaches for overcoming them, and highlights important considerations for organizations seeking to transition toward more secure software development practices. Organizations in academia, U.S. government, and private industry are encouraged to review this guidance and support adoption of MSLs.  Here is the link to the joint guide:  reducing memory-related vulnerabilities in modern software development

To learn more about memory safety, visit the CISA Secure by Design website Secure by Design | CISA