Code Signing stories
CodeHunter extends its behavioural malware analysis into CI/CD pipelines, targeting risky software artefacts before they reach production.
Windows fleets could be left blind to malware once attackers gain admin rights, as Bitdefender says bind links can fool endpoint security tools.
ESET says the gang's operator-backed toolkit could help affiliates bypass defences faster, widening the threat to businesses worldwide.
Developers can now package .NET desktop apps locally in a browser, reducing toolchain setup and keeping source code on their machine.
Hyperscale customers are already testing hard drives designed to keep firmware and device trust intact as quantum computing threats grow.
Digital confidence could be shaken if quantum computing breaks signatures and updates, exposing organisations to fraud, tampering and mistrust.
Many firms cannot see where their AI agents are, leaving identity, policy and supply-chain risks to grow as deployments scale.
Researchers say longer dwell time revealed how attackers scan freight, payments and banking systems to turn intrusions into cargo theft and fraud.
Trusted software and identity sessions are now prime attack paths, with ClickFix linked to more than 44% of defence evasion incidents.
AppViewX acquires AI identity start-up Eos and appoints its co-founder Archit Lohokare as Chief Executive, targeting non-human identity security.
Attackers push fake Red Alert Android app via SMS, turning Israel rocket warning tool into spyware that steals messages, contacts and location.
Mylobster.ai unveils plan for kernel-level AI assistants across major platforms, targeting a USD $200 billion-plus systems-level market.
Windows 11 security is blocking key software on Asus ROG Xbox Ally consoles, leaving pricey handhelds struggling to launch games properly.
Phishing campaign uses stolen logins and trusted RMM tools like GoTo Resolve and LogMeIn to quietly maintain access to corporate systems.
ReliaQuest warns BaoLoader and trust-based lures are surging, as attackers ditch zero-days for social engineering and valid certificates.
Auto-update turns your firewall into a living defence, slashing patch delays and shutting attackers' favourite door: unpatched systems.
Logitech users on macOS must install manual patches for Options+ and G Hub after an expired certificate stopped both apps from launching.
CommScope launches PRiSM-based secure boot signing for TI AM6x chips, aiming to simplify compliance with tightening industrial cyber rules.
The TamperedChef malware campaign targets healthcare, construction and manufacturing sectors using fake installers with valid digital signatures to spread malicious software.
DigiCert's digital trust solutions are now accessible via AWS Marketplace, enabling customers to easily purchase and manage security services in one place.
