The Xbox Live website could be under attack soon, Microsoft has warned. (Via ZDnet)
The news broke after a security update for Windows products, which fixed dozens of vulnerabilities in multiple Microsoft products.
Microsoft accidently leaked the security certificate for Xbox Live’s website, meaning that if an attacker so chooses they could impersonate the Xbox Live website. This is known as a man in the middle attack. It will allow the attacker to trick users into thinking they are on the Xbox Live website, when they are handing their username and password over to someone else.
ZDNet notes that certificate cannot be used to generate new certificates, impersonate other domains, or sign code. Microsoft is not currently aware of any attacks relating to the certificate.