On Mon, Jun 4, 2012 at 7:21 PM, Georgi Guninski <gunin...@guninski.com> wrote: > > http://technet.microsoft.com/en-us/security/advisory/2718704 > Microsoft is aware of active attacks using unauthorized digital certificates > derived from a Microsoft Certificate Authority. > > what does this mean? > > m$ inadvertently gave signing rights to lusers, they got rooted > or something else?
https://blogs.technet.com/b/srd/archive/2012/06/03/microsoft-certification-authority-signing-certificates-added-to-the-untrusted-certificate-store.aspx?Redirected=true https://www.securityweek.com/microsoft-unauthorized-certificate-was-used-sign-flame-malware Shreyas Zare Sr. Information Security Researcher Secfence Technologies www.secfence.com _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
