Windows 10: Microsoft Releases Out-of-Band Windows Updates That Remove Trust in Compromised eMudhra...

Microsoft has released out-of-band Windows updates that remove trust in seven certificates tied to the compromised eMudhra certificate authority, according to a Microsoft Security Response Center blog post. KB5134133 covers Windows 11 versions 24H2, 25H2, and 26H2, while KB5134125 covers Windows 10 versions 21H2 and 22H2. Both updates were released on October 26.

The updates target a specific group of devices: systems without Internet access, devices that cannot reach Microsoft's certificate update service, and machines where automatic Certificate Trust List (CTL) updates are turned off. Windows devices that receive CTL updates normally already get trust changes through that channel.

Why Microsoft Is Removing the eMudhra Roots


The release follows the discovery of eight eMudhra intermediate certificate authority private keys that were weak enough to be recovered almost instantly. All eight keys were generated in April 2025 and had values smaller than 256, which meant anyone could recover them by testing just 256 possible numbers. With those keys, attackers could have forged certificates for legitimate websites and intercepted encrypted traffic.

eMudhra revoked the eight intermediate certificates after the disclosure. Mozilla, Google, and Apple also started revoking them in their products.

Microsoft's first response was an update to the Windows Disallowed Certificate Trust List that blocked the eight intermediate authorities, six of them used for TLS and two for code signing. A CRLSet update for Microsoft Edge and WebView2 blocked the affected TLS certificates without a browser update.

The new out-of-band release goes a step further. Microsoft says it "removes seven certificates associated with the affected hierarchies: six eMudhra G3 roots and an AAA Certificate Services cross-sign, from the Windows trust list." Microsoft also says the same seven certificates are being removed from the Edge trust list on October 27.

The company stresses that removing a root is a broader trust decision than revoking the known compromised intermediates. Organizations with a specific compatibility requirement can choose to trust a certificate locally, subject to their own security assessment and policies.

What Administrators Should Do Now


Microsoft advises administrators to install the update on disconnected Windows systems and to check for certificates that chain to the removed roots, since those certificates may need replacement.

1. Identify Windows 11 24H2, 25H2, or 26H2 devices and Windows 10 21H2 or 22H2 devices that are offline, cannot reach Microsoft's certificate update service, or have automatic CTL updates disabled.
2. Install KB5134133 on the Windows 11 systems and KB5134125 on the Windows 10 systems.
3. Audit internal services, applications, and signed code for certificates issued under the six eMudhra G3 roots or the AAA Certificate Services cross-sign.
4. Replace affected certificates, or document a local trust exception only where a compatibility need has passed an internal security review.

Devices that already receive automatic CTL updates do not need the out-of-band package for this change. Microsoft is still investigating the remaining eMudhra roots and says it may make additional trust changes as needed.

Thank you for being a Ghacks reader. The post Microsoft Releases Out-of-Band Windows Updates That Remove Trust in Compromised eMudhra Certificates appeared first on gHacks.

read more...

 

the latest Win 10 update for Lumia appears to have stopped the phone communicating to Band 2

Hello Wyke,

We regret for the inconvenience. Let me assist you to resolve the issue.

Before we proceed further, let us know the model name of the Lumia Device you are using.

Follow the below methods and check if it helps to resolve the issue.

Method 1

For the calls and emails/text messages notification issue please check under settings that the Bluetooth is turned On. The tile for the notification on the Band should be On too. Please see this

link for assistance.

Method 2

If it still does not help, I suggest you to unregister, remove the Band device from the pairing list and re-add it.

• Step 1: Unregister your Microsoft Band from your phone
• Step 2: Remove your Microsoft Band from your phone’s list of paired Bluetooth devices
• Step 3: Reset your Microsoft Band
• Step 4: Set up your Microsoft Band again

Write to us with the updated status and the required information related to call and email functionality of the Lumia device with the Band device, for us to be able to assist you further.

Thank You.

 

Microsoft Releases New Update for Windows Vista

Microsoft yesterday released a new hotfix, KB941649, which improves the compatibility, reliability, and stability of Windows Vista. This update includes the following improvements:

• It extends the battery life for mobile devices.
• It improves the stability of portable computers and of desktop computers that use an uninterruptable power supply (UPS).
• It improves the reliability of Windows Vista when you open the menu of a startup application.
• It improves the stability of Internet Explorer when you open a Web page.
• It improves the stability of wireless network services.
• It shortens the startup time of Windows Vista by using a better timing structure.
• It shortens the recovery time after Windows Vista experiences a period of inactivity.
• It shortens the recovery time when you try to exit the Photos screen saver.
• It improves the stability of Windows PowerShell.

DOWNLOAD

Source: Microsoft