Security Advisory 2798897 Released, Certificate Trust List Updated

[Corrine]

Microsoft released Security Advisory 2798897 to provide notification regarding a a fraudulent digital certificate issued by TURKTRUST Inc.

 

TURKTRUST Inc. incorrectly created two subsidiary Certificate Authorities: (*.EGO.GOV.TR and e-islem.kktcmerkezbankasi.org). The *.EGO.GOV.TR subsidiary CA was used to issue a fraudulent digital certificate to *.google.com.

 

Additional information: Security Advisory 2798897 Released, Certificate Trust List Updated

[V.T. Eric Layton]

TURKTRUST? Just the name would have made me suspicious.

 

http://www.turktrust.com.tr/en/index.html

[Guest LilBambi]

I posted today as well on this with updates from KrebsOnSecurity, WOT, Firefox and Chrome.

 

Google Chrome was quick to get out the update on December 26th. I was disappointed that Firefox wasn't pushing out their update till Tuesday! The article that came from was posted January 4, 2013, so they literally mean THIS UPCOMING TUESDAY!

 

Very disappointed in Mozilla Firefox's response time.

 

And what about Apple's response?!

Edited January 6, 2013 by LilBambi