Earlier this month, Microsoft has quietly started pushing a bunch of new root certificates to all supported Windows systems. What is concerning is that they did not announce this change in any KB article or advisory, and the security community doesn’t seem to have noticed this so far.

Microsoft quietly pushes 18 new trusted root certificates · HA