It seems that Microsoft is getting ready to release the third update for Windows Phone 7 handsets - this one being a security update to fix the vulnerability caused by the compromised Comodo security certificates.

SlashGear is setting the release data as May 3rd, but I've been told that the update might be released earlier than this. Microsoft isn't officially committing to any specific release date.

The websites potentially affected by this security certificate leak are as follows:

login.live.com

mail.google.com

www.google.com

login.yahoo.com (3 certificates)

login.skype.com

addons.mozilla.org

"Global Trustee"

These certificates (which could be used to carry out phishing attacks) have already been revoked by Comodo, and Microsoft has already released an update for Windows.

This update will be pushed to handset owners other via the Zune software of over-the-air (OTA).

While this is technically the third update for WP7, I know of quite a few WP7 handset owners who have yet to see the first update (a pre-update to update the update mechanism).