On January 14 Microsoft announced a sweeping vulnerability that makes it possible to defeat the authentication of Elliptic Curve Cryptography (ECC) on Windows 10 and Windows Server systems, making it possible to create fake certificates on trusted roots that will fool these systems. Join our hosts and guest Nick France, CTO of SSL at Sectigo, as we explain this vulnerability, how it could be used in exploits, and what must be done to address it.

Root Causes 62: Windows CryptoAPI Spoofing Vulnerability Explained

Digital certificate industry veterans Tim Callan and Jason Soroko explore the issues surrounding digital identity, PKI, and cryptographic connections in today's dynamic and evolving computing world. Best practices in digital certificates are continually under pressure from technology trends, new laws and regulations, cryptographic advances, and the evolution of our computing architectures to be more virtual, agile, ubiquitous, and cloud-based. Jason and Tim (and the occasional guest subject matter expert) will help you stay current on developments in this essential technology platform and to understand the whys and wherefores of popular Public Key Infrastructures.

Share Root Causes 62: Windows CryptoAPI Spoofing Vulnerability Explained

Sign up to save your podcasts

Root Causes 62: Windows CryptoAPI Spoofing Vulnerability Explained

Root Causes 62: Windows CryptoAPI Spoofing Vulnerability Explained

More shows like Root Causes: A PKI and Security Podcast

Planet Money

Hacked

Security Now (Audio)

WSJ Tech News Briefing

Defensive Security Podcast - Malware, Hacking, Cyber Security & Infosec

Risky Business

SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)

CyberWire Daily

Darknet Diaries

Hacking Humans

CISO Series Podcast

The Peter Attia Drive

The Journal.

All-In with Chamath, Jason, Sacks & Friedberg

Risky Bulletin