Updated Microsoft software still leaks usernames and password information to strangers' servers – thanks to an old design flaw in Windows that was never properly addressed.

These details can be used to potentially unmask VPN users and commandeer Windows accounts. They can be obtained simply by tricking victims into visiting malicious websites or opening dodgy emails. It still works even on the latest builds of Windows 10 – Microsoft is unlikely to fix this any time soon.

[theregister.co.uk...]

This security problem has existed since 1997 and MS still hasn't fixed it. That Win 10 installs, and their super dooper Edge continue this lapse can make one's head explode. :)