Code Signing Inflation

https://fed.brid.gy/r/https://ithoughthecamewithyou.com/post/code-signing-inflation

Malvertisers Exploit Code Signing in TamperedChef Malware Campaigns

Meet the sneaky malware campaign that's been flying under the radar, leveraging polished marketing tactics and code signing to spread its malicious reach - with over 4,000 samples and 100 unique variants uncovered across three distinct clusters of activity.

https://osintsights.com/malvertisers-exploit-code-signing-in-tamperedchef-malware-campaigns?utm_source=mastodon&utm_medium=social

#TamperedchefMalware #CodeSigning #MalwareOperations #Malvertising #PaloAltoNetworks

Microsoft Disrupts Malware Signing Service Used by Ransomware Groups

Microsoft cracked down on a sophisticated malware signing service run by a group called Fox Tempest, which helped ransomware gangs disguise their malicious programs as legitimate software. This service was like a master forgery operation, creating counterfeit digital signatures that even experts struggled to spot.

https://osintsights.com/microsoft-disrupts-malware-signing-service-used-by-ransomware-groups?utm_source=mastodon&utm_medium=social

#FoxTempest #MalwareOperations #Ransomware #CodeSigning #ArtifactSigning

Microsoft Disrupts Fox Tempest's Ransomware-Enabling Code-Signing Service

Microsoft's Digital Crimes Unit has successfully disrupted a notorious code-signing service used by cybercriminals, including the group behind Fox Tempest, to create fake IDs and gain easy access to systems. This operation has effectively shut down a key tool used by hackers to spread ransomware and malware.

https://osintsights.com/microsoft-disrupts-fox-tempests-ransomware-enabling-code-signing-service?utm_source=mastodon&utm_medium=social

#Ransomware #CodeSigning #FoxTempest #MicrosoftDigitalCrimesUnit #MalwareOperations

If your looking for lower cost code signing certificate for an open source project then Certium has options:

https://www.certum.eu/en/

€69 for the first year, which apparently includes a USB device to house the certificate hardware, renewals is a lot less.

Seems like a good option, although I've not tried this personally 🙂🤷‍♂️

#AppDevelopment #OpenSource #Certificates #DigitalCertificates #CodeSigning

OpenAI Revokes macOS Certs Amid Supply Chain Breach Fallout

A recent supply chain breach has raised concerns about software trustworthiness, prompting OpenAI to revoke its macOS code-signing certificates after a malicious package was executed in its build pipeline. This swift action highlights the vulnerability of even the most secure systems to supply chain attacks.

https://osintsights.com/openai-revokes-macos-certs-amid-supply-chain-breach-fallout?utm_source=mastodon&utm_medium=social

#SupplyChain #CodeSigning #Macos #GithubActions #Axios

Cần tìm cách code signing phần mềm đơn giản và tiết kiệm nhất? Người dùng Reddit phân vân giữa các dịch vụ code signing trên 200 USD, hỏi có thể tránh được sự nghi ngờ của trình duyệt/máy tính không? Liệu có cần LLC để sử dụng dịch vụ này? #PhầnMềmMiễnPhí #CodeSigning #TiếtKiệmChiPhí #DevOps #PhátTriểnPhầnMềm

https://www.reddit.com/r/SaaS/comments/1qm9pvg/how_to_codesign_in_the_cheapest_possible_way/

Ein abgelaufenes Code-Signing-Zertifikat legt unter macOS Logitech-Tools lahm:
Keine App → keine Maus- & Tastatur-Profile → Produktivität im Eimer.

Der Vorfall zeigt: Zertifikats- & Update-Management sind kritische Infrastruktur.
Security scheitert nicht immer an Hackern, sondern oft an ablaufenden Basics.

#ITSecurity #CodeSigning #SupplyChainSecurity #macOS #Logitech #PKI #SecurityBasics #DevOps

https://arstechnica.com/gadgets/2026/01/expired-certificate-completely-breaks-macos-logitech-apps-user-customizations/?utm_brand=arstechnica&utm_social-type=owned&utm_source=mastodon&utm_medium=social

Streamline your development workflow with automated code signing for Windows executables using Azure Trusted Signing, .NET, and GitHub Actions. Enhance security and save time! #CodeSigning #DevOps #windows

https://isaacl.dev/gxh