Tech Outpost

[GORPY1 Super Spam Squasher]

Unauthorized Microsoft Digital Certificates

added Monday, June 4, 2012 at 09:16 am

Microsoft has released a security advisory to address the revocation of a number of unauthorized digital certificates. Maintaining these certificates within your certificate store may allow an attacker to spoof content, perform a phishing attack, or perform a man-in-the-middle attack.

The following certificates have been revoked by this update:

• Microsoft Enforced Licensing Intermediate PCA (2 certificates)
• Microsoft Enforced Licensing Registration Authority CA (SHA1)

Microsoft has provided an update to all support versions of Microsoft Windows to address this issue. Additional information can be found in Microsoft Security Advisory 2718704.

[huwyngr Norton Fighter]

I was offered this update (I'm on advise but don't download or install) and I went ahead with it immediately since I read reports that it deals with some hacked certificates that affect Windows Update itself.

And Patch Tuesday is coming .....