“US should corner the market on software vulnerabilities”