Comodohacker threatens to issue fake Windows updates
A hacker known as Comodohacker, who claimed responsibility for attacking certification authority DigiNotar and issuing fake digital certificates some Microsoft domains (along with fraudulent certificates for Google, Twitter and others), now claims to be able to issue fake Windows updates - something that Microsoft denies. If true, this would make it possible for him to distribute malicous code through Windows' own update service. Microsoft says the Windows Update client won't install software that's not signed by the actual Microsoft root CA certificate. You can read more about it here: