Welcome to WebmasterWorld Guest from 54.145.208.64

Forum Moderators: bill

Message Too Old, No Replies

Microsoft Certification Authority Certificates Added To Untrusted Certificate Store

   
11:54 am on Jun 4, 2012 (gmt 0)

WebmasterWorld Administrator engine is a WebmasterWorld Top Contributor of All Time 10+ Year Member Top Contributors Of The Month



Microsoft Certification Authority Certificates Added To Untrusted Certificate Store [blogs.technet.com]
Today, we released Security Advisory 2718704, notifying customers that unauthorized digital certificates have been found that chain up to a Microsoft sub-certification authority issued under the Microsoft Root Authority.
We'd also like to share how this issue relates to a complex piece of targeted malware known as "Flame". As many reports assert, Flame has been used in highly sophisticated and targeted attacks and, as a result, the vast majority of customers are not at risk. Additionally, most antivirus products will detect and remove this malware. That said, our investigation has discovered some techniques used by this malware that could also be leveraged by less sophisticated attackers to launch more widespread attacks. Therefore, to help protect both targeted customers and those that may be at risk in the future, we are sharing our discoveries and taking steps to mitigate the risk to customers.
2:06 am on Jun 5, 2012 (gmt 0)

WebmasterWorld Administrator bill is a WebmasterWorld Top Contributor of All Time 10+ Year Member Top Contributors Of The Month



I don't see the update for this on the Windows Update yet. Often certificate updates are often not marked critical/important and so you'll need to manually select them.

<added>
If you don't want to wait for Microsoft Update, then the updates are here: [support.microsoft.com...]