{
  "id": 16744380,
  "title": "Microsoft releases out-of-band Windows fixes with certificate updates",
  "url": "https://urgent.news/2026/10/27/microsoft-releases-out-of-band-windows-fixes-with-certificate-updates",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-10-27T12:30:00.000Z",
  "source": {
    "name": "The Register",
    "slug": "the-register",
    "url": "https://www.theregister.com/security/2026/10/27/microsoft-releases-out-of-band-windows-fixes-with-certificate-updates/5305637"
  },
  "original_language": "en",
  "account": "Microsoft has released an out-of-band update for Windows, focusing on certificate issues rather than emergency security fixes. This update applies to supported operating systems, including Windows 11, Windows Server 2025, and Windows 10. The update aims to update the current certificate trust list (CTL) for devices that cannot access Microsoft's certificate-update service or have automatic CTL updates disabled. Along with the October 13 update, it addresses ongoing VPN issues and potential problems with on-premises Exchange Servers and Smart App Control, as well as audio and Remote Desktop connections for non-admin users. However, these issues are not resolved by the patch, so users should be aware of them when installing it. The update also comes in the wake of Microsoft's response to compromised eMudhra certificate keys, which required a significant cleanup effort. Microsoft removed seven certificates associated with the affected eMudhra hierarchies from its Windows trust list, including six eMudhra G3 roots and an AAA Certificate Services cross-sign.",
  "summary": "Did you hear the one about eMudhra and the power of 4? Time to get connected to certificate trust list updates",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}