Windows Server Compare
I just found a report talking about how Microsoft works with external security researches to understand how to best protect the code against attacks and how to fix vulnerabilities. The report is part of a series that you can find on the Windows Server Compare site and others include information on threat modelling, security education etc. You find all reports here
If you are interested in security I also recommend you to subscribe to our Security Newsletter that we send every month. Click here to subscribe or look at the latest version of the newsletter.