Emergency Windows Update released to thwart spoofed Microsoft certificate in Flame malware

Emergency Windows Update released to thwart spoofed Microsoft certificate in Flame malware:






Microsoft released an emergency Windows Update over the weekend to address a certificate spoof issue. The company said on Sunday that its update for all supported versions of Windows is related to the recently discovered Flame malware, where the software giant says it discovered this particular malware was using a spoofed Microsoft certificate. "We have discovered through our analysis that some components of the malware [Flame] have been signed by certificates that allow software to appear as if it was produced by Microsoft," revealed Microsoft's Mike Reavey.
The digital certificate issue, stemming from a problem with Microsoft's Terminal Server Licensing Service cryptography algorithm, could make malware appear as if it was a genuine...
Continue reading…