No. 1 Story

HP job cuts loom for Australian employees

A number of Australian employees of Hewlett-Packard are facing the loss of their jobs as the global computer giant looks to slash its worldwide workforce by up to 30,000.

read more

Related Articles

Microsoft, warns, rogue, digital, certificates
The internal security agency MI5 has warned UK businesspeople that agents of the Chinese...
The highest level of total malware detected in more than a year, and four...
In what is one of the most potentially serious zero-day Microsoft Windows bugs this...
Microsoft has joined forces with Celestix Networks and Network Engines to deliver appliances running...
Early WiMAX networks will have a number of security vulnerabilities, according to ABI Research,...

Microsoft warns of rogue digital certificates

Business IT - Security

Microsoft is warning its users of nine rogue digital certificates that could be used in a variety of attacks involving popular sites. They include sites operated by Microsoft, Google, Yahoo!, Skype and Mozilla.


Certification authority Comodo has issued nine certificates to an applicant without performing appropriate identity checks, and as a result someone out there has certificates relating to login.live.com, mail.google.com, www.google.com, login.yahoo.com, login.skype.com, addons.mozilla.org, and "Global Trustee".

Although the certificates have now been revoked, there is still a chance that they could be used to spoof content, perform phishing attacks, or perform man-in-the-middle attacks if software does not check the revocation lists and does not use the Online Certificate Status Protocol.

Microsoft has released a security advisory along with updates for all currently supported versions of Windows to mitigate the issue. Those updates are being delivered automatically through Windows Update and are also available for download via this page.

"We are unaware of any active attacks," said Bruce Cowper, Microsoft's group manager for trustworthy computing.