logo

Critical Windows Update-CryptoAPI Spoofing

ID: 998310c7-c14c-57f8-82e3-22e6a516901f

STIX ID: report--998310c7-c14c-57f8-82e3-22e6a516901f

Feed Name: Zscaler Security Research Blog

Threat Score
75/100

Date Published: 2025-04-02

Date Updated: 2026-05-01

...
...

Microsoft released critical Patch Tuesday updates addressing CVE-2020-0601 (CryptoAPI ECC certificate spoofing) and multiple RDP-related remote code execution flaws (CVE-2020-0609, CVE-2020-0610, CVE-2020-0611). Organizations are urged to apply updates immediately (CISA issued an emergency directive for some agencies); Zscaler reports protections available via sandboxing, inline signatures, and SSL inspection to block spoofed certificates.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.