Microsoft has issued an emergency update for almost all versions of Windows and also for Microsoft devices running Windows Phone 8 and 8.1. The fake digital certificates were issued by the National Informatics Centre (NIC) of India – a unit of India’s Ministry of Communications and Information Technology. The certificates could be used to spoof content, perform phishing attacks, or perform man-in-the-middle attacks against Web properties. Microsoft is not aware of any kind of attack leveraging this issue, but millions of websites operate by banks, e-commerce companies.
Source: https://thehackernews.com/2014/07/microsoft-issues-emergency-windows.html