… then apparently it’s very important to get the latest security update.<\/p>\n
Sources tell KrebsOnSecurity that\u00a0Microsoft Corp.<\/strong> is slated to release a software update\u00a0 Tuesday [January 14, 2020] to fix an extraordinarily serious security vulnerability in a core cryptographic component present in all versions of Windows<\/strong>. Those sources say Microsoft has quietly shipped a patch for the bug to branches of the U.S. military and to other high-value customers\/targets that manage key Internet infrastructure, and that those organizations have been asked to sign agreements preventing them from disclosing details of the flaw prior to Jan. 14, the first Patch Tuesday of 2020.<\/p>\n
According to sources, the vulnerability in question resides in a Windows component known as\u00a0crypt32.dll<\/a>, a Windows module that Microsoft says handles \u201ccertificate and cryptographic messaging functions in the CryptoAPI.\u201d The\u00a0Microsoft CryptoAPI<\/a> provides services that enable developers to secure Windows-based applications using cryptography, and includes functionality for encrypting and decrypting data using digital certificates.\u00a0[KrebsOnSecurity<\/strong><\/a>]<\/em><\/p><\/blockquote>\n
Cryptography is hard to do properly. More information at the link above.<\/p>\n
But this dust-up does remind that I don’t often have to get a security update for my hammer.<\/p>\n","protected":false},"excerpt":{"rendered":"
… then apparently it’s very important to get the latest security update. Sources tell KrebsOnSecurity that\u00a0Microsoft Corp. is slated to release a software update\u00a0 Tuesday [January 14, 2020] to fix an extraordinarily serious security vulnerability in a core cryptographic component present in all versions of Windows. Those sources say Microsoft \u2026 Continue reading