Vulnerabilities and Exploits

In almost all engineering fields, it is very common to analyze past failures so that we can learn and improve on the current situation. According to the US Department of Homeland Security, 90% of security incidents are the result of exploiting software defects. Many developers are therefore testing their software before releasing it. These tests happen either on-premise or in the cloud. However, they often focus on user ability, performance, and somewhat synthetic security testing. Therefore, many developers are often unaware of security vulnerabilities in their software. There is no mandate or regulation on adapting a secure development life cycle or having a responsible vulnerability disclosure. It is therefore the responsibility of the individual and the broader security community to build more secure software and inform independent software vendors...