I heard talk of this before but it's the first time I've seen an independent report on it.

See the Microsoft Oracle Showdown here: Microsoft beats Oracle in security showdown