That program is MAPP (Microsoft Active Protections Program). [1] All governments (except Iran, Syria, etc.) are part of it, as well as hundreds of private compa

That program is MAPP (Microsoft Active Protections Program). [1] All governments (except Iran, Syria, etc.) are part of it, as well as hundreds of private companies internationally. Of course, vulnerabilities are routinely leaked. [2] Other programs include the SSI (Shared Source Initiative) [3] by which governments get access to the Windows source code, and the GSP (Government Security Program) [3] which helps governments find vulnerabilities in said source code. Not to mention COFEE [4] -- I wonder how many antivirus detect that, especially since its source code was leaked... [1] http://technet.microsoft.com/en-us/security/dn467918 http://technet.microsoft.com/en-us/security/dn467918 [2] http://www.zdnet.com/blog/security/microsoft-kicks-chinese-company-out-of-vulnerability-sharing-program/11853 http://www.zdnet.com/blog/security/microsoft-kicks-chinese-c... [3] https://www.microsoft.com/en-us/sharedsource/default.aspx https://www.microsoft.com/en-us/sharedsource/default.aspx [4] https://wikileaks.org/wiki/Microsoft_COFEE_(Computer_Online_Forensics_Evidence_Extractor)_tool_and_documentation,_Sep_2009 https://wikileaks.org/wiki/Microsoft_COFEE_(Computer_Online_...