Specifically I was referencing the recent Russian cyberattack on US government servers that were/are run by microsoft. The flaw was known about for years but no one did anything about it because profit.