Products -- Existing and New
Not applying lessons learned
Old bugs still present in new versions
Known problems are not getting fixed
Programmers not aware of proper use of algorithms and tools
- buffer overflows
- timing windows
- trusting untrustworthy information
- principle of least privilege