It was just over one year ago, May 28, 2012, to be exact, that I transitioned from running active MSRC cases and writing bulletins to my current role managing software security incidents. A lot has changed in that year - and I’ve dealt with some interesting issues during my tenure - but...
certificate
consumer protection
cryptography
cumulative update
deployment priority
digital certificates
internet explorer
june 2013
microsoft office
pki
remote code execution
security
security advisories
software security
trustworthy computing
update management
vulnerabilities
windows 7
windows update
windows vista
Revision Note: V2.0 (October 9, 2012): Revised advisory to rerelease the KB2661254 update for Windows XP and to announce that the KB2661254 update for all supported releases of Microsoft Windows is now offered through automatic updating. Customers who previously applied the KB2661254 update do...
Let me give you a better description of the problem... I follow the instruction from the Gmalto instructions to install and configure Dell smart card USB Keyboard. This means I loaded the drivers for WudfUsbccidDrv and check Manager and it looks it recognizes the smart card and the smart card...
Revision Note: V2.0 (October 9, 2012): Revised advisory to rerelease the KB2661254 update for Windows XP and to announce that the KB2661254 update for all supported releases of Microsoft Windows is now offered through automatic updating. Customers who previously applied the KB2661254 update do...
The United States Department of Homeland Security today urged Java users to disable Java in a vulnerability discovered by CERT (Computer Emergency Response Team). The details can be found here:
Vulnerability Note VU#625617 - Java 7 fails to restrict access to privileged code
Feds warn PC users...
Hello,
Today we released Security Advisory 2798897 to notify customers that we are aware of active attacks using a fraudulent digital certificate issued by TURKTRUST Inc. To help protect customers, we have updated the Certificate Trust List (CTL) to remove the trust of the certificates causing...
advisory
attack
certificate
communication
customers
digital
fraud
management
protection
security
software
trustlist
trustworthy
turktrust
update
windows server
windows vista
windows xp
Revision Note: V1.0 (January 3, 2013): Advisory published.
Summary: Microsoft is aware of active attacks using one fraudulent digital certificate issued by TURKTRUST Inc., which is a CA present in the Trusted Root Certification Authorities Store. This fraudulent certificate could be...
Severity Rating: Important
Revision Note: V1.0 (December 11, 2012): Bulletin published.
Summary: This security update resolves a privately reported vulnerability in Microsoft Windows. The vulnerability could allow security feature bypass if an attacker presents a revoked...