Microsoft Security Advisory (2607712) -  Fraudulent Digital Certificates Could Allow Spoofing

Microsoft is aware of active attacks using at least one fraudulent digital certificate issued by DigiNotar, a certification authority present in the Trusted Root Certification Authorities Store. A fraudulent certificate could be used to spoof content, perform phishing attacks, or perform man-in-the-middle attacks against all Web browser users including users of Internet Explorer. While this is not a vulnerability in a Microsoft product, this issue affects all supported releases of Microsoft Windows.

Use Windows Updates to get the update appropriate for your particular operating system.

Avast! program update, version 6.0.1289.

Here's a list of most important changes:
- New Script Shield - now scanning deeper and supporting more host processes
- Web Shield now scanning all processes by default
- Stability improvements in aswSP.sys
- Better tracking of file sources
- WebRep now working in new versions of Firefox
- Under-the-hood improvements in the Behavior Shield and Sandbox modules
- Solved a compatibility problem with certain Steam-based games
- Minor improvements in the product UI
- Various other security and stability related fixes

download/install via internal updater

Firefox 6.0.2

The latest version of Firefox has the following changes:

• Removed trust exceptions for certificates issued by Staat der Nederlanden (see bug 683449 and the security advisory)
• Resolved an issue with gov.uk websites (see bug 669792)