Microsoft Security Advisory (2524375)

[Boyfriend]

Microsoft is aware of nine fraudulent digital certificates issued by Comodo, a certification authority present in the Trusted Root Certification Authorities Store on all supported versions of Microsoft Windows.

Comodo advised Microsoft on March 16, 2011 that nine certificates had been signed on behalf of a third party without sufficiently validating its identity. These certificates may be used to spoof content, perform phishing attacks, or perform man-in-the-middle attacks against all Web browser users including users of Internet Explorer.

These certificates affect the following Web properties:

• login.live.com
• mail.google.com
• www.google.com
• login.yahoo.com (3 certificates)
• login.skype.com
• addons.mozilla.org
• "Global Trustee"

Further Reading: Microsoft Security Advisory (2524375)
Microsoft Security Advisory: Fraudulent Digital Certificates could allow spoofing

[Krumpelt]

Thanks Boyfriend for warning !
My antivirus downloaded and installed this critical updating early today already..

[leofelix]

Thank you
Firefox 3.6/4.0 already blocks fraudolent certificates
http://blog.mozilla.com/security/2011/03/22/firefox-blocking-fraudulent-certificates/
Same for Chrome v 10.0.648.15
http://googlechromereleases.blogspot.com/2011/03/stable-and-beta-channel-updates_17.html

Opera and Safari users have to wait :-)

[INDRANIL]

Thanks for the warning info Boy . Cheers .

[@mazingAG]

Thanks for the heads up

[Bearcat]

Thanks for the info Boyfriend! Much appreciated!

[jj1two3]

Thanks Boyfriend for the information.