https://krebsonsecurity.com/2020/01/cryptic-rumblings-ahead-of-first-2020-patch-tuesday/
Speculation is that it will be an update to crypt32.dll, the module that handles all certificate and cryptographic functions.
Make sure to get all the news and analysis here:
And here’s the full story:
I can’t wait to hear about all the exploits in Windows 7 starting tomorrow.
Ironically, since the cryptographic update is for Windows 10 only, for today Windows 7 is the most secure OS in the Windows family.
And here’s the patch index page for today:
And here’s the ever hilarious analysis from The Register:
Here’s our blog breakdown:
We also got some good press around sharing our analysis and recommendations:
In case you don’t follow Swift on Security, here’s their take on things:
More details on the proof of concept exploit:
And the researchers used the proof of concept to rickroll the NSA:
Looks like the patch is having problems for some people:
Has anyone run into this?
No account yet? Create an account
Enter your username or e-mail address. We'll send you an e-mail with instructions to reset your password.