MS releases important fix for fraudulent certificates

[Borg 386]

Due to nine fraudulent digital certificates issued, MS has issued this fix available now for the following problem:

Microsoft today warned that Comodo has issued nine fraudulent digital certificates to a third party whose identity could not be sufficiently validated, a scenario that could allow attackers to spoof content, perform phishing attacks, or perform man-in-the-middle attacks against all Web surfers.

According to the Microsoft advisory, the fraudulent Web certificates affect the Microsoft Live service, Google’s mail system, Yahoo and Skype log-ins.

• login.live.com
• mail.google.com
• Google
• login.yahoo.com (3 certificates)
• login.skype.com
• addons.mozilla.org
• “Global Trustee”

If you have your updater set to auto install, the fix should be applied. If not, the update is available at the following link for all supported versions of Windows to help address this issue.

For more information about this update, see Microsoft Knowledge Base Article 2524375.

Read More:

Microsoft warns: Fraudulent digital certificates issued for high-value websites | ZDNet

Post, Security News:

http://www.sevenforums.com/security...t-digital-certificates-issued-high-value.html

 

[SledgeDG]

Thanks for the info...I just ran the stand alone installer.