New MSRC blog: Microsoft’s response to compromised eMudhra certificate authority keys

🚨 The Signal: Microsoft has revoked compromised eMudhra certificate authority keys, requiring immediate Windows updates. This action prevents attackers from impersonating trusted entities and maintaining system integrity.

The Impact

All Windows users are at risk if critical security updates are not applied, potentially leading to system compromise.

• Security Teams: Must validate update deployment to mitigate certificate-based attacks.
• System Administrators: Required to deploy urgent out-of-band patches to all Windows devices.
• Disconnected Systems: Face high risk without manual update application, creating critical vulnerabilities.

The Action

1. Identify all Windows devices not receiving automatic certificate trust updates or out-of-band patches.
2. Download the relevant out-of-band Windows updates (e.g., KB5134130 for Windows 11, version 23H2) from the Microsoft Update Catalog.
3. Deploy the downloaded updates to all identified Windows devices immediately.
4. Verify successful installation of the updates across the environment to ensure revocation of compromised certificates.

Domain: Other · Impact: high · Workload: Other · Essential Eight: Patch Operating Systems · ISM: ISM-1407, ISM-1501, ISM-1621, ISM-1622, ISM-1623, ISM-1654, ISM-1655, ISM-1694, ISM-1695, ISM-1696, ISM-1701, ISM-1702, ISM-1877, ISM-1889, ISM-1902