Microsoft's Charney tells Congress vulnerabilities are a fact of life