Ethical Hacking News
Microsoft has released an out-of-band update for Windows to update the current certificate trust list (CTL) of devices that cannot access Microsoft's certificate-update service. The update responds to the compromised eMudhra certificate keys and includes everything in the October 13 update, such as ongoing VPN issues and changes to on-premises Exchange Servers. The update aims to mitigate post-breach vulnerabilities and demonstrates Microsoft's commitment to protecting its users and preventing potential security breaches.
Microsoft released an out-of-band update for Windows to update the certificate trust list (CTL) on devices that cannot access the certificate-update service. The update was triggered by the compromise of eMudhra certificate keys, which Microsoft quickly blocked to prevent potential security breaches. The update is a response to Microsoft's own problem, not just a general security patch, as it was not caused by a Microsoft product issue. The update highlights the importance of regular certificate updates and the need for organizations to stay vigilant in the face of emerging threats. The incident serves as a reminder of the importance of cybersecurity and the need for organizations to invest in robust security measures.
Microsoft, the technology giant, has recently released an out-of-band update for Windows, focusing on updating the current certificate trust list (CTL) of devices that cannot access Microsoft's certificate-update service or where automatic CTL updates are disabled. This non-security out-of-band release applies to supported OSes ranging from Windows 11 and Windows Server 2025, to Windows 10, and includes everything in the October 13 update, such as the ongoing VPN issues and the change that could break on-premises Exchange Servers.
The update is a response to the compromised eMudhra certificate keys, which were compromised earlier this month. According to Microsoft, the private keys of eMudhra were compromised, requiring a massive cleanup effort. The Indian certification authority's private keys were compromised, and Microsoft moved swiftly to block the affected certificate authorities. The company updated its Windows Disallowed Certificate Trust List to block the affected certificates and released a separate CRLSet release for Edge and WebView2.
The out-of-band patches are usually released after the company breaks a product and needs to issue an emergency fix. However, in this case, the revision is due to Somebody Else's Problem and a need to get a CTL update out to devices that are disconnected from CTL updates. The update also contains known issues with Smart App Control, audio, and Remote Desktop connections for non-admin users, which are not resolved in this patch.
Microsoft's out-of-band patches are a crucial step in mitigating post-breach vulnerabilities. The company's swift response to the compromised eMudhra certificate keys demonstrates its commitment to protecting its users and preventing potential security breaches. The update also highlights the importance of regular certificate updates and the need for organizations to stay vigilant in the face of emerging threats.
The incident serves as a reminder of the importance of cybersecurity and the need for organizations to invest in robust security measures. Microsoft's response to the compromised eMudhra certificate keys demonstrates the company's proactive approach to addressing security vulnerabilities and its commitment to protecting its users.
In conclusion, Microsoft's out-of-band update for Windows is a critical step in mitigating post-breach vulnerabilities. The company's swift response to the compromised eMudhra certificate keys demonstrates its commitment to protecting its users and preventing potential security breaches.
Related Information:
https://www.ethicalhackingnews.com/articles/Microsoft-Unveils-Emergency-Certificate-Updates-to-Mitigate-Post-Breach-Vulnerabilities-ehn.shtml
https://www.theregister.com/security/2026/10/27/microsoft-releases-out-of-band-windows-fixes-with-certificate-updates/5305637
Published: Tue Oct 27 09:56:23 2026 by llama3.2 3B Q4_K_M
