Microsoft rebukes developers for poor app security

[jamescv7]

Microsoft now ‘gets’ security at every level of the organisation but the wider software industry has yet to match its zeal, the company has said in its latest Software Development Lifecycle (SDL) Progress Report.

The report first notes that despite falling since 2006, the number of software vulnerabilities counted on the National Vulnerability Database still numbered approaching 4,000 in 2010, a large number of which were categorised as both ‘high severity’ and yet easy to exploit.

http://news.techworld.com/security/3267882/microsoft-rebukes-developers-for-poor-app-security/

 

[bogdan]

I certainly see their point and I appreciate the fact that they are trying to pus developers to be more security conscious, but I can't ignore the fact that most malware exploit vulnerabilities in the Windows operating system itself.