Microsoft Security Advisory (2718704)

Got the update on Windows 8 too, thanks for the notification.

 

Microsoft certification authority signing certs added to the Untrusted Cert Store

*

Source.

 

Re: Microsoft certification authority signing certs added to the Untrusted Cert Store

Nope, someone beat you to it in another topic (can't find a link atm) and I've already even blogged about it.

 

Re: Microsoft certification authority signing certs added to the Untrusted Cert Store

Taken from: http://blogs.technet.com/b/srd/arch...added-to-the-untrusted-certificate-store.aspx

 

Re: Microsoft certification authority signing certs added to the Untrusted Cert Store

Much better.

 

Truly critical update.

Got it too, thanks.

ronjor, please, merge my other thread with this one. You posted about it first and I didn't see.

 

What it looked like before being revoked
http://twitpic.com/9sobor

 

Thanks for posting this Ron, as an informal poll among Win 7 users has shown this small patch was and is not available on Wndows Update.
Unless a lay user is pointed at the link, they will not see this patch. Thus far ....

http://blogs.technet.com/b/msrc/archive/2012/06/03/microsoft-releases-security-advisory-2718704.aspx

 

Strange, the advisory clearly points to windows update as a mean to patch. Or I misunderstood your post?

http://technet.microsoft.com/en-us/security/advisory/2718704

And this is from a WIN7 system:

 

I am guessing that this Windows update is why my XP machine rebooted itself at 3 am this morning.

 

Windows update,that's how I got it.

 

I'm good with the XP update and required reboot. For some reason I had my speaker volume turned way up. I am not so good with the XP system shut down and start up sounds jolting me out of my sleep at 3 am.

This reason alone would justify an upgrade to Windows 7.

 

You may fetch the patch via Windows Update (recommended) - or via the KB article here: http://support.microsoft.com/kb/2718704

When Microsoft offers an update via Windows Update, this would be the preferred method. For IT Pro's, etc - use your discretion in deploying these to your clients, workstations and so on.

Flame speading from PC to PC via hijacked Windows Update puts more emphasis on keeping your PC patched and current, more than ever.

 

Awesome, I guess the Windows Update hardening is to prevent the Flame malware spoofing updates.

 

Also Server 2003/R2 requires a reboot. Server 2008/R2 do not.

 

Microsoft Hardens Windows Update

http://www.darkreading.com/advanced...rdens-windows-update-after-flame-attacks.html

 

Re: Microsoft Hardens Windows Update

Good deal, though I'm sure the ladies and gents behind these weapons will work their way around it or find some other way to plow through it.

 

Re: Microsoft Hardens Windows Update

It appears to claim it will happen during next weeks Windows Update, surprising fast for Microsoft.

 

Re: Microsoft Hardens Windows Update

I think MS has learned its lesson from so many years of piddling around. Plus, using Windows Update for malware is just one PR calamity they really don't want to have to deal with. It's one thing for some little bug buried deep in code to help out in an attack, it's quite another for the very system that patches and tries to keep umpteen millions of users safe to be used as a weapon.