Microsoft Security Update Issued Early

As you probably know, Microsoft issues it's security updates on a schedule. The second Tuesday of each month is referred to as "Patch Tuesday" - this helps businesses plan for the testing and deployment of security updates. However, this past weekend, Microsoft issued an unusual "out-of-band" update a full week before the scheduled time. This was to revoke some security certificates that had apparently been used by the "Flame" malware to be able to install itself disguised as a legitimate Windows update. A security certificate is supposed to "guarantee" the authenticity of a particular file. This is just the latest example of compromised certificates landing with a big CLUNK.

No comments :