Microsoft had previously blocked the directly affected certificates on October 20, but this new measure goes further by also removing seven higher certificates in the certificate hierarchy.
A similar change is scheduled for Microsoft Edge today, October 27. For normal Windows users, the recommendation is to allow automatic certificate and browser updates to run normally.
However, computers without an Internet connection or with automatic certificate updates disabled may need to be updated manually. For more details and next steps, see this Microsoft blog post.
