ajbrown
03-24-2011, 07:47 AM
I read this today over coffee and figured I would share with TOTV. No need to panic, but worth making sure your system is updated. In summary someone was able to create 9 phony SSL certificates, some for domain names we know like google, yahoo, etc. You need to update your CRL (certificate revocation list). Microsoft has released an update (KB2524375). I am looking if this automatically takes care of Firefox or Chrome or if they need to be updated separately.
Here is the info at Microsoft:
http://www.microsoft.com/technet/security/advisory/2524375.mspx
http://support.microsoft.com/kb/2524375
From the article:
SSL Certificates are the Internet equivalent of drivers' licenses, said Paul Turner, the vice president of products and customer solutions at Venafi, an Enterprise Key and Certificate Management firm. The bogus certificates could be used in phishing or man in the middle attacks against organizations that haven't updated their certificate revocation lists, he said. They could also be used to sign applications and plug ins, he said.
Full article here:
http://threatpost.com/en_us/blogs/phony-web-certificates-issued-google-yahoo-skype-others-032311
Here is the info at Microsoft:
http://www.microsoft.com/technet/security/advisory/2524375.mspx
http://support.microsoft.com/kb/2524375
From the article:
SSL Certificates are the Internet equivalent of drivers' licenses, said Paul Turner, the vice president of products and customer solutions at Venafi, an Enterprise Key and Certificate Management firm. The bogus certificates could be used in phishing or man in the middle attacks against organizations that haven't updated their certificate revocation lists, he said. They could also be used to sign applications and plug ins, he said.
Full article here:
http://threatpost.com/en_us/blogs/phony-web-certificates-issued-google-yahoo-skype-others-032311