Attack code signed by Microsoft? An apparent hijack of a corporation's Windows Update? An advanced crypto attack seen in-the-wild? Yet the attack was contained, Windows Update hardened and the entire risky certificate hierarchy trust was removed from over a billion systems within a week? We'll walk through how Microsoft responded to this complex attack and protected customers worldwide.