In 2023, internal analysis at Google estimated that 75% of CVEs used in zero day exploits targeted memory safety vulnerabilities, highlighting the urgent security risks of coding.
The National Security Agency (NSA) published guidance in 2022 recommending organizations only use memory safe languages (MSLs) when possible to avoid exploitation.
Matt Miller, a Microsoft engineer, declared that around 70% of all software vulnerabilities addressed in yearly updates are memory safety issues, emphasizing the widespread danger.
The agencies urged senior executives at every software manufacturer to reduce customer risk by prioritizing design and development practices that implement MSLs, which can enhance security.
Collection
[
|
...
]