We need to be able to jail the morons that let this situation develop, not merely sue them.
Why?
Because the people in charge think they will always have enough money to be sued.
Note, as others have mentioned, this is not a training problem, it is an air gap problem.
That is, no one trying to develop software that hacks other software should be allowed to put it on the internet. It needs to be developed on air gapped computers that physically cannot get to the internet.
This also means that 'agents' should have the same rules. If you cannot ensure your agents do not attempt to hack software, then your agents should not be allowed out of your computer.