View all newsletters
Receive our newsletter - data, insights and analysis delivered to you
  1. Technology
  2. Networks
November 27, 2015

Microsoft rescues Dell from root certificate security flaws

News: Two security flaws were discovered on several Dell computers.

By CBR Staff Writer

Microsoft has updated several of its security tools to clean up two digital certificates installed on various Dell computers.

The updates are for Windows Defender for Windows 10 and 8.1; Microsoft Security Essentials for Windows 7 and Vista; Microsoft Safety Scanner; and Microsoft Windows Malicious Software Removal Tool.

Microsoft’s new security tools will remove the eDellRoot and DSDTestProvider certificates.

Dell installed the eDellRoot certificate as part of a support tool in order to make it faster for its customers to service their system.

The certificate has however introduced an unintended security vulnerability, allowing hackers to read private messages and undertake phishing attacks.

Security firm Symantec said that malware signed with the eDellRoot certificate authority has already started appearing on VirusTotal.

Dell had to pull its Dell System Detect application, after it was discovered to contain a self signed root certificate authority.

Content from our partners
Infosecurity Europe 2024: Rethink the power of infosecurity
Rethinking cloud: challenging assumptions, learning lessons
DTX Manchester welcomes leading tech talent from across the region and beyond

The company said that the problem affects users who downloaded Dell System Detect product between 20 October and 24 November 2015.

 

Websites in our network
Select and enter your corporate email address Tech Monitor's research, insight and analysis examines the frontiers of digital transformation to help tech leaders navigate the future. Our Changelog newsletter delivers our best work to your inbox every week.
  • CIO
  • CTO
  • CISO
  • CSO
  • CFO
  • CDO
  • CEO
  • Architect Founder
  • MD
  • Director
  • Manager
  • Other
Visit our privacy policy for more information about our services, how Progressive Media Investments may use, process and share your personal data, including information on your rights in respect of your personal data and how you can unsubscribe from future marketing communications. Our services are intended for corporate subscribers and you warrant that the email address submitted is your corporate email address.
THANK YOU