ChangeIntelIT change radar
Public mode

No access to your tenant or devices. Every item links to its source. What this means

Some sources, documents or advisories need attention: 272/272 feeds/APIs · 469/469 docs · 8/9 advisories · checked 09:38 UTC Customize Public modeDiscuss ChangeIntel on Discord
MC1526780 Prevent or fix issuesAdmin impact

New MSRC blog: Microsoft’s response to compromised eMudhra certificate authority keys

From Microsoft 365 Message Center Archive by Merill Fernando · Microsoft may not have sent this notice to your tenant.
Windows
Message Center archive Open in your tenant

Microsoft asks admins to prevent or fix an issue. Read what it asks below and check the linked documentation; whether your tenant is affected is not known here.

What the notice says

Microsoft’s text, safely structured

Microsoft has published a new blog post outlining our response to the compromise of eMudhra intermediate certificate authority keys, including changes to the Windows and Microsoft Edge trust lists.

The Windows out-of-band updates are now available in the Microsoft Update Catalog. Administrators managing disconnected devices, or devices that don’t receive automatic certificate trust updates, can find more context and recommended steps in Microsoft’s response to compromised eMudhra certificate authority keys.

The following Windows updates are now available:

  • Windows 11, version 26H1: KB5134134
  • Windows 11, versions 26H2, 25H2, and 24H2: KB5134133
  • Windows 11, version 23H2: KB5134130
  • Windows Server 2025: KB5134137
  • Windows Server 2022: KB5134140
  • Windows 10, version 22H2 and Windows 10 Enterprise LTSC 2021: KB5134125
  • Windows 10 Enterprise LTSC 2019 and Windows Server 2019: KB5134124
  • Windows Server 2016: KB5134123

What changed

Between archive captures, newest first

The archive supplies one version of this notice.

Learn more

Links from the notice and their documentation checks

Shared KB KB5134123

Shared KB KB5134124

Shared KB KB5134125

Shared KB KB5134130

Shared KB KB5134133

Shared KB KB5134134

Not confirmed here

What this page cannot tell you
  • Whether your tenant is affected: this is Microsoft's notice, not a check of your settings.
  • 8 linked pages have not been read yet.
ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 28 Oct 09:38 UTC · 272 of 272 readable · 268 fully read · documentation 469/469 current

No accounts or analytics; your preferences stay in your browser. Information, not advice. ChangeIntel is an independent tool and is not affiliated with or endorsed by Microsoft, Apple, Google, Broadcom (VMware), Jamf, Oracle, Mozilla, or any other vendor it covers. Product names are trademarks of their owners. Built by Evotec.