Once again, Americans are bearing the burden of software defects. Millions of Americans recently faced delays with their prescription drugs or were forced to pay full price due to a ransomware attack. While the United States has started to make progress in responding to cyberattacks — including by signing incident reporting requirements into law — it’s clear that there is still significant work to be done to curb the ransomware epidemic. Software manufacturers must take action to prevent compromises in the first place, and businesses that use their products should push them to do so.