This just in:

Microsoft admits to signing rootkit malware in supply-chain fiasco https://news.ycombinator.com/item?id=27640553