Microsoft has a security fix in the works for Windows Phone 7.

First, it is important to point out that this fix will be issued by Microsoft for a mistake made by a third party Certification Authority called Comodo. According to The Unwired, the latter “issued fraudulent digital certificates on behalf of a third party without sufficiently validating its identity. These certificates may be used to spoof content, perform phishing attacks or perform man-in-the-middle attacks against all web browsers including Internet Explorer on Windows Phone 7.”

The update is currently being tested by Microsoft and its partners. The fix is expected to be released early May.