
Vulnerabilities
SWUpdate flaw allows malicious updates via improper certificate validation
A critical vulnerability in SWUpdate permits attackers to install malicious firmware by bypassing certificate trust checks through embedded intermediates.
Everything Threat Times has reported about certificate validation: 2 stories, newest first. Part of our Vulnerabilities coverage.

A critical vulnerability in SWUpdate permits attackers to install malicious firmware by bypassing certificate trust checks through embedded intermediates.

A flaw in Microsoft Partner Center’s certificate validation lets attackers elevate privileges remotely, rated CVSS 10.0 critical.