Microsoft vexed by falsified certs

The Register: “On 30 and 31 January, someone posing as a Microsoft employee persuaded
VeriSign, the largest US certificate authority, to issue two certificates under
Microsoft’s name.”