Microsoft will keep getting record numbers of CVEs through the next 12 months as there's decades of under investment, particularly in Windows but other areas too.
For the record any basic code scanning tool, not AI, would (and did) highlight these things. I sat on the calls where we discussed them. Nobody would fund fixing it.
RE: https://cyberplace.social/@GossiTheDog/114504451845204949
An update - one good side effect of the GenAI boom is it’s forcing Microsoft to fix decades of under-investment in security engineering. The DWM stuff is finally getting patched each month.
Consulting giant Accenture has told many employees that the company will now only spend $29 a month per person on Claude. Employees subject to the cap, some of whom had been spending as much as $1,000 monthly, are scrambling to find ways to make sure they can keep spending as much as they already are.
https://www.404media.co/accenture-tells-employees-they-can-now-spend-only-29-on-claude-per-month/
RE: https://infosec.exchange/@SwiftOnSecurity/117446076818709529
Hey, look mom and dad, I aced my STD test again this month
1.) Users are the #1 vector for malware
2.) Linux has no users
3.) wow linux is secure
