Despite the deluge, no major (AI) corp has managed to publish a classification of and elaboration on the root causes of the (type of) bugs that have been found. Why they could occur in the first place, and why they had not been found until now.

I suppose they are more interested in selling subscriptions than making programming more of a sound engineering discipline...

I think a lot of software engineers at Microsoft need to either be retrained or just let go entirely, and maybe so does a lot (or probably most) of the management.

Why are you still using languages that make it trivial to write most kinds of security bugs? Microsoft has written more than one language, they have/had in-house talent on how to do this, and one of those languages is C#, which bootstrapped itself after the whole Sun v. Microsoft case (the one where Microsoft tried to EEE Java, and Sun yanked their technology license; Microsoft then just removed Java(tm) and made their own replacement dialect on-top of their homegrown VM)...

But more importantly, for the things that can't, or shouldn't, be written in C#... they have hired a lot of ex-Mozilla Rust developers (the ones that left during Mitchell Baker's disastrous attempt to fire "rockstar developers") to get that ball rolling on that.

Why hasn't a majority of the important code been rewritten in Rust yet? Not only that, Microsoft/Github advertises that LLMs are really super good at doing language-changing rewrites, so why aren't they dog fooding this and/or are they admitting that LLMs can't do this?

Haha, last time it was around 600. They are trully doing a great job with every update. I wonder how many centuries of Patch Tuesday they need to fill all existing and "Update" holes in Windows 11 ?