On January 14th NSA warned users about the vulnerability in Windows 10 and have warned users to do the updates to protect them from the Cryptographic Vulnerability
- If you want to run your Windows Update manually to get the patch more quickly, follow these instructions from Microsoft and click the “Check for Windows updates” button.
- Alternatively, when you are at your Windows 10 computer, click the Start button, select Settings, then Update & Security, then Windows Update, and click Check for updates to run Windows Update manually.
- If you have multiple PCs running Windows 10, ensure they are all up-to-date with the latest security patches.
- DO NOT attempt to download a patch for this vulnerability from anywhere other than the Windows Update tool. Windows system updates should only be downloaded directly from Microsoft.
The Vulnerability could allow the attacker to use a spoofed code-signing certificate (digital signature) to sign malicious software, allowing malware to appear to be from a trusted source