@GossiTheDog@cyberplace.social
2025-05-13 17:21 UTC
4 of the 5 exploited vulns this month are variants.
MS is the most valuable company in the world in terms of stock market value at least - could they, I dunno, red team Windows Common Log File System Driver before it gets exploited basically every single month? They can afford to, there's definitely some strategic thinking needed in key pillars of Windows OS security, methinks.
Replies (1)
-
@Enigma@infosec.exchange 2025-05-14 00:01
@GossiTheDog@cyberplace.social the alternative answer might disappoint... that there is active security auditing, and active bug filing by security teams at Microsoft, but the product team has conflicting priorities to balance against fixes... My biggest soap box has always been, 'adding more security people, doesn't make software more secure... better alignment, prioritization, and resourcing for defect accountability in engineering does.'