So let me get this straight:

in a 48-hour period, Microsoft-owned Github got compromised due to a malicious extension in Microsoft-owned VScode

and Microsoft-owned Windows has a system-integral RCE vulnerability thanks to Microsoft-owned Windows Defender... scanning a file.

you know, i'm starting to wonder if Microsoft's announced pivot to "security first" wasn't genuine
@neurovagrant Well, tbf they stopped loading all the passwords to memory on Edge startup