cube maia

January 2020 Patch Tuesday Microsoft fixes Crypto API Vulnerability Reported by the US NSA

Microsoft has released a security update to address CVE-2020-0601 to fix a dangerous flaw in Crypt32.dll impacting the Windows 10 and Windows Server 2016/2019 systems. Based on the advisory, “A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) certificates”. This also falls on the same day that the Windows 7 support has ended. This places many organisations that are still running Windows 7 systems in a vulnerable state.

Read More