Microsoft has released an out-of-band security patch to address a spoofing vulnerability after a number of unauthorized digital certificates derived from a Microsoft CA were discovered in the recently discovered "Flame" malware.
The patch can be downloaded from the Window Update site, or manually from: http://support.microsoft.com/kb/2718704
More details on the subject here: Microsoft Emergency Bulletin: Unauthorized Certificate used in "Flame"




