---
title: "Security Bulletin: Windows 10 Crypto Vulnerability"
description: Systems Engineering discusses the Microsoft vulnerability announcement for Windows 10 cryptography function (CVE-2020-0601) and the subsequent fixes.
---

[IT and Cybersecurity News](https://blog.systemsengineering.com/blog)

# [Security Bulletin: Windows 10 Crypto Vulnerability](https://blog.systemsengineering.com/blog/security-bulletin-windows-10-crypto-vulnerability)

 Written by [Systems Engineering](https://blog.systemsengineering.com/blog/author/systems-engineering) | January 15, 2020

Yesterday Microsoft announced and delivered a fix for a serious vulnerability in Windows 10 cryptography function ([CVE-2020-0601](https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0601)). The NSA had previously discovered and notified Microsoft to develop a solution. Microsoft also stated that they had seen no exploit of this vulnerability to date. The vulnerability would allow an attacker to disguise their malicious software as a valid and certified piece of code; thereby spoofing the Windows 10 PC or Windows Server 2019 into thinking it is legitimate code that can be trusted and therefore executed.

### Course of Action

Systems Engineering has received the security update from Microsoft.  We will begin patching our customers starting Thursday, January 16. Customers with [SE Essentials](https://www.systemsengineering.com/managed-it/it-essentials/), [SE Secure](https://www.systemsengineering.com/security/network-security/), [SE Desktop](https://www.systemsengineering.com/security/endpoint-security/)[Defense](https://www.systemsengineering.com/security/endpoint-security/) (desktops only), and [SE Monitoring](https://www.systemsengineering.com/managed-it/network-monitoring/) (servers only) will receive this update as part of their regular patching schedule.

If you do not subscribe to one of the previously mentioned  services, we highly recommend you work to get this critical security update for [CVE-2020-0601](https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0601) deployed as soon as possible. 

Please contact Systems Engineering Customer Service at 207.772.4199 or your Account Manager with any questions.

[View full post](https://blog.systemsengineering.com/blog/security-bulletin-windows-10-crypto-vulnerability)

```json
{
  "@context" : "http://schema.org",
  "@type" : "BlogPosting",
  "author" : {
    "@type" : "Person",
    "name" : "Systems Engineering"
  },
  "dateModified" : "2020-07-23T12:57:23.079Z",
  "datePublished" : "2020-01-15T20:22:05Z",
  "headline" : "Security Bulletin: Windows 10 Crypto Vulnerability",
  "image" : {
    "@type" : "ImageObject",
    "height" : 350,
    "url" : "https://cdn2.hubspot.net/hubfs/508286/Security%20Alert_Systems%20Engineering.png",
    "width" : 600
  },
  "mainEntityOfPage" : "https://blog.systemsengineering.com/blog/security-bulletin-windows-10-crypto-vulnerability",
  "publisher" : {
    "@type" : "Organization",
    "logo" : {
      "@type" : "ImageObject",
      "height" : 60.0,
      "url" : "https://cdn2.hubspot.net/hubfs/508286/Systems%20Engineering%20Logo_2019_Color_100x100px-4.png",
      "width" : 66.92957
    },
    "name" : "<span>Systems Engineering</span> Blog"
  }
}
```