Current Activity - Unauthorized Microsoft Digital Certificates

[Current Activity <us-cert () us-cert gov>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

US-CERT Current Activity

Unauthorized Microsoft Digital Certificates

Original release date: Monday, June 4, 2012 at 09:16 am
Last revised: Monday, June 4, 2012 at 09:16 am


Microsoft has released a security advisory to address the revocation of
a number of unauthorized digital certificates. Maintaining these
certificates within your certificate store may allow an attacker to
spoof content, perform a phishing attack, or perform a man-in-the-middle
attack.

The following certificates have been revoked by this update:
 * Microsoft Enforced Licensing Intermediate PCA (2 certificates)
 * Microsoft Enforced Licensing Registration Authority CA (SHA1)

Microsoft has provided an update to all support versions of Microsoft
Windows to address this issue. Additional information can be found in
Microsoft Security Advisory 2718704.

US-CERT encourages users and administrators to apply any necessary
updates to help mitigate the risk.

Relevant Url(s):
<http://technet.microsoft.com/en-us/security/advisory/2718704>


____________________________________________________________________

   Produced by US-CERT, a government organization.
____________________________________________________________________

This product is provided subject to the Notification as indicated here:
http://www.us-cert.gov/legal.html#notify

This document can also be found at
http://www.us-cert.gov/current/#microsoft_unauthorized_digital_certificates

For instructions on subscribing to or unsubscribing from this
mailing list, visit http://www.us-cert.gov/cas/signup.html

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)

iQEVAwUBT8y4OndnhE8Qi3ZhAQI7KQf9FJlkJKlULO6evs0oCeBvtrsfO7LEHdxZ
J18LnH6PEpiNac3QjzVnaGYmZ5HM84UgoW0gqw1hmqCpFbo6xCqdqxB0wWjL7Qh1
7U5RstYN7riYCp1Z0mQsfhdrvD7Rpb0NTIGfFUJHN+/LUuFeY2YzjujgPw6PmqDo
P+kUK3fda05WMlxFbUxSWQ3+hcCIfRv5rUY+87jDB2NDju+7Aqs/GfNZE2JORngp
tKeA2ZoUo32AgFGpcDUZeGTwJlcBSGQFKmgHHlsjGEEeNB/Agn5wviX3bkIxieUX
zbXft1vBMCa81cf3QtdZDb4FbvWIi7+AkmNQvbCkPJkw3M5elkS26Q==
=nYRj
-----END PGP SIGNATURE-----