Matthew Green: Only ~5% of Vulnerable Software Fixed During Key 4-Month Window

waral555 · x · 2026-10-24

• Cryptographer Matthew Green says that during a critical 4-month window when defenders had almost exclusive access, only about 5% of vulnerable software got addressed — far short of what we'll wish we'd done.
• He acknowledges the labs weren't at fault per se: the event was unprecedented and costly, and much of the tech world was demanding full capabilities be released; the labs genuinely tried to sound the alarm.
• The exchange came in response to a question about where the labs dropped the ball.

Related event: Cryptographer Matthew Green: Only ~5% of Vulnerable Software Fixed in 4-Month Window(2 posts)→

Original post →