WINDOWS VISTA - THE FIRST 90 DAYS Windows Vista, the successor to Windows XP, released to business users on November 30, 2006. Since the release of Windows XP, the Microsoft approach to security has gone through some significant changes. In January 2002, only a few months after the release of Windows XP, Microsoft launched their Trustworthy Computing initiative and began to revise their entire product development process with the goal of long-term, ongoing, security improvement for customers. How much impact has that commitment had for Windows Vista security? It is too soon to get a complete picture, but as of February 28, 2007, the full release of Windows Vista has been in production use by business customers for 90 days – the minimum period for which I think we can start to look for indications of improvement. To get a complete view of the early vulnerability indicators, we will look at vulnerability fixes and vulnerability disclosures in the first 90 days.