Rust can help make software secure – but it's no cure-all

Horizon3.ai's analysis of CISA's 2023 Known Exploited Vulnerabilities finds insecure exposed functions were the most common vulnerability (48.8%), with memory-safety flaws and path abuse each representing 19.5% of cases; notably, 75% of analyzed memory-safety bugs were exploited as zero-days. The article concludes that while adopting memory-safe languages like Rust can reduce certain classes of bugs, it will not prevent logic errors, insecure endpoints, or supply-chain and configuration issues, so broader secure development and hardening efforts remain essential.