CISA extends comment period on software development bad practices guide through mid-December

The Cybersecurity and Infrastructure Security Agency has granted a two-week extension for stakeholders to submit feedback on a guidance document outlining common cybersecurity pitfalls for software developers.

“CISA received requests to extend the deadline given the Thanksgiving holiday. Therefore, the comment period is now open through December 16, 2024,” the agency says in a Federal Register notice scheduled to be published this morning.

The guidance released on Oct. 16 is co-sealed with the FBI and aimed at “software...