So, let me see if I understand the current state of anti-malware from an application vendor's perspective:

* One tool's AI/ML feature hallucinates and marks your software as malware
* VirusTotal publishes their finding
* All the other anti-malware vendors see the one report in VirusTotal and copy it.
* App vendor's customers complain because their local scanner or IT department's monitoring freaks out
* The app vendor has to individually contact each anti-malware vendor, dealing with broken support portals, outdated contact info, or full email inboxes.
* A few vendors clear your app, while others won't clear their finding until other vendors clear first (insert Spiderman pointing meme)
* Repeat forever

There's a lot of appeal to Cybellum, but their SBOM scanning tech is still immature on Windows. They consistently mis-identify Microsoft's binaries as OSS equivalents (Wine, Samba), even though those binaries are attributed and signed by MS. Hoping they get that resolved soon.

https://bird.makeup/users/thecybersechub/statuses/1729516803616117009