Mindblowing to me that Microsoft had to be repeatedly reminded by essentially the US Government for 6 months to update their own blog to include important information about a security breach... and then nobody even realised they had quietly updated the blog until CSRB pointed it out. Did nobody think through the optics?