‘Flame’ Malware Prompts Microsoft Patch
Summary: Microsoft released an emergency update, KB2718704, to block software signed with certificates from its Terminal Server Licensing Service, an older cryptography algorithm that Flame abused to cloak itself as legitimate Microsoft code. Microsoft's Mike Reavey said Flame is now well detected by antivirus and had spread to a very small number of select systems, but the company issued the patch because other attackers could reuse the same signing method for phishing and Microsoft impersonation.
Why it matters: The concern is not Flame itself but the template: any attacker who obtains code-signing certificates from a still-trusted authority can impersonate Microsoft, and the patch only closes this one certificate path.
Read the original at Krebs on Security ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026