Should Cybersecurity Spend Outstrip Software Spend?

Greg Brockman believes cybersecurity spend should vastly outstrip software spend. He says he may not be right, and he still holds the view. Software is becoming like the barrier to entry, and in the same exchange it is called cheap and close to free. People want software they can believe in, software that is reliable and secure. To him, resilience is the value, and it will matter even more.

The picture of one open-source maintainer as the little block under everyone else never made sense to Greg Brockman. Reliable software is hard to write, organizations depend on a supply chain, and few companies audit the supply chain. Uploading a malicious package has hit many companies. Human developers could not fix the pattern, because few people know the packages and the security techniques. Socket and other firms scan an open-source supply chain for vulnerabilities. A maintainer can take over a project and install malicious code.

Greg Brockman says OpenAI is treating a coordinated response as a core priority and is partnering with CrowdStrike and the wider community.