I wonder what happens at the Microsoft Security Response Center when a big vuln hits like this? Does it tie up all their resources just working on the one vuln?

I wonder what happens at the Microsoft Security Response Center when a big vuln hits like this? Does it tie up all their resources just working on the one vuln? Generally no, if only because of Microsoft’s sheer size. For something like this issue, while its potential impact is big, I would guess that it only tied up the team(s) that work on CryptoAPI.