Microsoft warns of possible attacks on Windows using false ssl certificate

[#1]

http://www.techweekeurope.co.uk/security/microsoft-ssl-164611?utm_source=avast&site_under=true

[#2]

Another fault from microsoft's lack of security, I would say I'm not surprised, but, I expect lots of security flaws with them...

[#3]

not Microsoft that failed though its comodo that issued the fake certificate, any security is only as good as the person validating it, and yet again the issuing authority has been the weak link !
that its yet another fake ssl certificate issued by comodo is no great surprise either (they have a long history of doing it ) that MS has advertised the fact is a credit to themselves as is the fact they changed the revoked certificate list update functionality from windows 8 onwards to prevent such attack vectors being any use once the thing gets revoked ....

[#4]

Well, I went to install the recommended 2 updates. One said that it was not required on this computer and the other said it was already installed!