Last year, on June 1, 2023, the CA/Browser (CA/B) Forum’s updated Code Signing Baseline Requirements went into effect, aiming to enforce stronger private key protection for code signing certificates.

NVIDIA certificates are being used to sign malware, enabling malicious programs to pose as legitimate and slide past security safeguards on Windows machines. Two of NVIDIA’s code-signing certificates ...

Code signing is the process of attaching a digital signature to software, ensuring its authenticity and integrity from the developer or publisher to the end user. This digital signature process ...

Security researchers have found that hackers are using code-signing certificates more to make it easier to bypass security appliances and infect their victims. New research by Recorded Future's Insikt ...

Abstract: Abuse of code signing has garnered attention from security researchers, as evidenced by threat modeling efforts targeting the public key infrastructure trust infrastructure of code signing ...

The hacker group that recently broke into systems belonging to graphics chip maker Nvidia has released two of the company’s old code-signing certificates. Researchers warn the drivers could be used to ...

Imagine that, for whatever reason, you hear you’re the target of an elite cyber-mafia. You don’t take it seriously until you’re driving down the freeway and suspect someone has tampered with your ...