After 4 Month of dropping mails to several addresses without any answer #Microsoft has finally fixed their PGP signatures in security notifications. The result is what counts. You are welcome!