Microsoft just published an interesting Windows Vista One Year Vulnerability Report
I especially like this graph:
I mentioned a few days ago that Vista seems to have picked up at XP’s current level of stability. From this it looks like it’s done the same with security.
I think what’s remarkable is that they’ve accomplished this while increasing the amount of Windows code (because of new features). Normally more code creates more ways for it to fail and to get hacked, but the Vista team has done the opposite. That’s impressive.
For bonus points, read through the report’s comments (pretty fun on its own) and then read this response on the MS Software Development Lifecycle team blog.