Revision Note: V1.0 (November 12, 2013): Advisory published.
Summary: Microsoft is announcing a policy change to the Microsoft Root Certificate Program. The new policy will no longer allow root certificate authorities to issue X.509 certificates using the SHA-1 hashing algorithm for the purposes...
Revision Note: V1.0 (November 12, 2013): Advisory published.
Summary: Microsoft is announcing a policy change to the Microsoft Root Certificate Program. The new policy will no longer allow root certificate authorities to issue X.509 certificates using the SHA-1 hashing algorithm for the purposes...
Revision Note: V1.0 (August 13, 2013): Advisory published.
Summary: Microsoft is announcing the availability of an update for supported editions of Windows Vista, Windows Server 2008, Windows 7, Windows Server 2008 R2, Windows 8, and Windows Server 2012 that restricts the use of certificates...
advisory
attacks
certificate
deprecation
hashing
information
man-in-the-middle
md5
microsoft
phishing
root certificate
safety
security
technology
update
vulnerability
windows 7
windows 8
windows server
windows vista
Revision Note: V1.0 (August 13, 2013): Advisory published.
Summary: Microsoft is announcing the availability of an update for supported editions of Windows Vista, Windows Server 2008, Windows 7, Windows Server 2008 R2, Windows 8, and Windows Server 2012 that restricts the use of certificates...
advisory
attacks
certificate
cybersecurity
encryption
hashing
man-in-the-middle
md5
microsoft
phishing
protocol
root certificates
security
threat
update
vulnerability
windows 7
windows 8
windows server
windows vista
Revision Note: V2.0 (October 9, 2012): Revised advisory to rerelease the KB2661254 update for Windows XP and to announce that the KB2661254 update for all supported releases of Microsoft Windows is now offered through automatic updating. Customers who previously applied the KB2661254 update do...
Revision Note: V2.0 (October 9, 2012): Revised advisory to rerelease the KB2661254 update for Windows XP and to announce that the KB2661254 update for all supported releases of Microsoft Windows is now offered through automatic updating. Customers who previously applied the KB2661254 update do...
Revision Note: V1.0 (January 3, 2013): Advisory published.
Summary: Microsoft is aware of active attacks using one fraudulent digital certificate issued by TURKTRUST Inc., which is a CA present in the Trusted Root Certification Authorities Store. This fraudulent certificate could be...
Today, we published Security Advisory 2743314, which provides guidance that will help protect customers from a technique that could allow a man-in-the middle attack to obtain a user’s domain credentials when VPN is configured to use PPTP and MSCHAPv2.
Customers concerned with this...
Revision Note: V2.0 (November 16, 2011): Revised to announce the rerelease of the KB2641690 update. See the Update FAQ in this advisory for more information. Also, added link to Microsoft Knowledge Base Article 2641690 under Known Issues in the Executive Summary.
Summary: Microsoft is...
advisory
cybertrust
digicert
digital certificates
encryption
entrust
internet explorer
knowledge base
known issues
man-in-the-middle
microsoft
phishing
revision note
security
spoofing
update
vulnerability
weak keys
windows
Revision Note: V1.0 (November 10, 2011): Advisory published.
Summary: Microsoft is aware that DigiCert Sdn. Bhd, a Malaysian subordinate certification authority (CA) under Entrust and GTE CyberTrust, has issued 22 certificates with weak 512 bit keys. These weak encryption keys, when...
Revision Note: V4.0 (May 10, 2011): Announced the release of an update for Windows Mobile 6.x devices. Advisory Summary:Microsoft is aware of nine fraudulent digital certificates issued by Comodo, a certification authority present in the Trusted Root Certification Authorities Store, on all...
advisory
certificate authority
certification authority
comodo
cybersecurity
digital certificates
fraudulent
internet explorer
man-in-the-middle
phishing
release note
security
spoofing
trusted root
update
vulnerability
windows
windows mobile
windows phone
zune hd
Revision Note: V2.0 (April 19, 2011): Added Windows Mobile 6.x, Windows Phone 7, Microsoft Kin, and Zune devices to affected software and devices.Summary: Microsoft is aware of nine fraudulent digital certificates issued by Comodo, a certification authority present in the Trusted Root...
advisory
attacks
authority
certificates
explorer
fraudulent
internet
kin
man-in-the-middle
microsoft
mobile
phishing
security
spoofing
trusted
update
windows
zune
Revision Note: V1.0 (March 23, 2011): Advisory published. Advisory Summary:Microsoft is aware of nine fraudulent digital certificates issued by Comodo, a certification authority present in the Trusted Root Certification Authorities Store on all supported versions of Microsoft Windows. Comodo...