$50M a Year in Vendor Lock Waste Underscores Importance of Trump’s New Cyber Strategy
$50M a Year in Vendor Lock Waste Underscores Importance of Trump’s New Cyber Strategy
Publish Date: 2026-03-17 08:03:00
Source Domain: netchoice.org
WASHINGTON—Today, NetChoice announced major updates toMicrosoftVulnerabilityTracker.com, adding new real-time trackers to clearly show the escalating costs and risks of the federal government’s overreliance on a few dominant providers for its IT software. This comes ahead of the RSA Conference in San Francisco next week, where thousands of cybersecurity professionals, researchers and tech companies will meet on solutions for protecting against digital threats.
Additionally, the findings compliment President Donald Trump’s new Cyber Strategy for America, which elevates secure, modernized infrastructure to a national priority and prompts review of the current federal procurement system.
“The Trump administration’s new cyber strategy should underscore how much the practice of vendor lock in government IT procurement costs our nation’s taxpayers and national security,” said Patrick Hedger, NetChoice Director of Policy. “Our update makes clear why Congress must urgently reform software procurement to align with this strategy and reduce dependency on a small number of underperforming vendors.”
The updated tracker now features three new counters, showing on average:
- Patching Microsoft vulnerabilities cost the U.S. government as much as $50 million a year, which is the equivalent of:
- VA benefits for 23,745 veterans for a year
- Enhanced FBI background checks for a year
- Salaries for 756 Border Patrol agents for a year
- Salaries for 346 air traffic controllers for a year
- SNAP benefits for 22,257 people for a year or 8,012,820 people for a day
- WIC program benefits for 68,306 people for a year
- Head Start participation for 4,815 children for a year
- Disaster relief for 14,509 households
- The Childhood Cancer Data Initiative for a year
- Farm subsidies for 1,786 farms for a year
- Microsoft reporting one new vulnerability every 6.5 hours
- Federal agencies reporting one new cybersecurity incident…
