tr

Updated:09:59 AM EST Feb 27


this is ggmania.com subsite Serious security vulnerability in a core cryptographic component - TechAmok

Serious security vulnerability in a core cryptographic component - [security]
04:51 PM EST - Jan,14 2020 - post a comment

Sources tell KrebsOnSecurity that Microsoft Corp. is slated to release a software update on Tuesday to fix an extraordinarily serious security vulnerability in a core cryptographic component present in all versions of Windows. Those sources say Microsoft has quietly shipped a patch for the bug to branches of the U.S. military and to other high-value customers/targets that manage key Internet infrastructure, and that those organizations have been asked to sign agreements preventing them from disclosing details of the flaw prior to Jan. 14, the first Patch Tuesday of 2020. According to sources, the vulnerability in question resides in a Windows component known as crypt32.dll, a Windows module that Microsoft says handles "certificate and cryptographic messaging functions in the CryptoAPI." The Microsoft CryptoAPI provides services that enable developers to secure Windows-based applications using cryptography, and includes functionality for encrypting and decrypting data using digital certificates. A critical vulnerability in this Windows component could have wide-ranging security implications for a number of important Windows functions, including authentication on Windows desktops and servers, the protection of sensitive data handled by Microsoft's Internet Explorer/Edge browsers, as well as a number of third-party applications and tools. Equally concerning, a flaw in crypt32.dll might also be abused to spoof the digital signature tied to a specific piece of software. Such a weakness could be exploited by attackers to make malware appear to be a benign program that was produced and signed by a legitimate software company.

Short overview of recent news articles

The filming of The Witcher season two is expected to start Feb 2020
Android February Security Patch Fixes Critical Bluetooth
Titan's Treasure PUZZLE Lock Solved
2020 Moto RAZR Durability Test!
Fingerprint/RFID Lock Defeated With a Paperclip
NIGHTWISH - Noise (OFFICIAL MUSIC VIDEO)
Back to the Future: Tesla CyberTruck Edition - Video
Microsoft Flight Simulator- leaked gameplay
Apple Finally Buying AMD CPUs?
Nokia 2.3 Offers 2-Day Battery for $129
The Jesus Rolls - Official VOD Trailer
AMD Desktop Processor Market Share Now at 18.3%
AMD Radeon Adrenalin 2020 Edition 20.2.1 driver
Russian Multiplication - Numberphile
NVIDIA's GeForce Now Service is Launched
VMWare Updates Licensing Model, Setting 32-Core Limit
MS Releases Microcode Updates Adressing Intel CPU Vulnerabilities
Facebook Expands Parental Controls for Messenger Kids
Shakira & J. Lo's FULL Pepsi Super Bowl LIV Halftime Show
Jason Momoa Super Bowl Commercial 2020
Resident Evil Netflix Series to Enter Production in June
NVIDIA GeForce 442.19 WHQL driver
BEST SUPER BOWL 2020 Commercials Sneak Peek!
TESTAMENT - Night of the Witch
FAST AND FURIOUS 9 Trailer (2020)
>> News Archive <<

TechAmok - Privacy Policy        loading time:0.01secs