Thanks to Rodney Buike for sharing his interview with Jeff Jones (Director of Trustworthy Computing @ MSFT) who discussed his extensive research of publically available vulnerability statistics.

Here's the mp3 recording.

Rodney contributes to the very popular Canadian IT Pro team blog - it's an excellent source of information about a wealth of topics including UNIX and Security.

Jeff hosts an interesting CSO blog that's focussed on the needs of Chief Information Security Officers (CISOs) and executives.