SecurityBrief US - Technology news for CISOs & cybersecurity decision-makers
United States

Code Signing Stories

American Stories

Code Signing stories

The post-quantum mandate isn't about algorithms, it's about operational trust
Data Protection

The post-quantum mandate isn't about algorithms, it's about operational trust

June 2026 U.S. executive orders have turned post-quantum readiness into an operational race, forcing firms to map and manage trust fast.

By David Sequino • 5 min read • Fri, 31st Jul 2026
CodeHunter pushes behavioural malware checks upstream
Hybrid Cloud

CodeHunter pushes behavioural malware checks upstream

CodeHunter extends its behavioural malware analysis into CI/CD pipelines, targeting risky software artefacts before they reach production.

By Sofiah Nichole Salivio • 4 min read • Thu, 12th Feb 2026

Global Stories

Code Signing stories

DigiCert adds Secure Releases to Software Trust Manager
Risk & Compliance

DigiCert adds Secure Releases to Software Trust Manager

The update helps teams spot newly exposed releases sooner, tying signing workflows to vulnerability data as software risks change over time.

By Joseph Gabriel Lagonsin • 3 min read • Yesterday
Google warns of rise in open source supply chain attacks
Ransomware

Google warns of rise in open source supply chain attacks

Malicious packages are now spreading faster across code repositories, with Google saying open source ecosystems face the sharpest rise in risk.

By Sean Mitchell • 5 min read • Fri, 31st Jul 2026
Google brings quantum-safe signatures to Cloud KMS
Data Protection

Google brings quantum-safe signatures to Cloud KMS

Enterprises can now deploy quantum-safe signing in production as Cloud KMS adds post-quantum algorithms for sensitive records and transactions.

By Sean Mitchell • 4 min read • Wed, 29th Jul 2026
Expel warns of cyber gang targeting certificate trust
Malware

Expel warns of cyber gang targeting certificate trust

Financial firms in Asia Pacific face signed malware that can evade Windows checks after attackers abuse support portals to steal certificates.

By Sean Mitchell • 4 min read • Wed, 22nd Jul 2026
Bitdefender flags Windows bind links that blind EDR
Ransomware

Bitdefender flags Windows bind links that blind EDR

Windows fleets could be left blind to malware once attackers gain admin rights, as Bitdefender says bind links can fool endpoint security tools.

By Mark Tarre • 4 min read • Thu, 16th Jul 2026
Gentlemen ransomware gang supplies EDR killers to affiliates
Ransomware

Gentlemen ransomware gang supplies EDR killers to affiliates

ESET says the gang's operator-backed toolkit could help affiliates bypass defences faster, widening the threat to businesses worldwide.

By Joseph Gabriel Lagonsin • 4 min read • Tue, 23rd Jun 2026
XAML.io adds browser-based desktop packaging in preview
Application Security

XAML.io adds browser-based desktop packaging in preview

Developers can now package .NET desktop apps locally in a browser, reducing toolchain setup and keeping source code on their machine.

By Sofiah Nichole Salivio • 3 min read • Fri, 5th Jun 2026
WD unveils post-quantum hard drives for enterprise
Encryption

WD unveils post-quantum hard drives for enterprise

Hyperscale customers are already testing hard drives designed to keep firmware and device trust intact as quantum computing threats grow.

By Joseph Gabriel Lagonsin • 4 min read • Tue, 19th May 2026
Rebuilding trust: preparing for the post-quantum internet
Encryption

Rebuilding trust: preparing for the post-quantum internet

Digital confidence could be shaken if quantum computing breaks signatures and updates, exposing organisations to fraud, tampering and mistrust.

By Richard Ford • 5 min read • Fri, 8th May 2026
AI agents multiply risk, says DigiCert chief product officer
Software-as-a-Service

AI agents multiply risk, says DigiCert chief product officer

Many firms cannot see where their AI agents are, leaving identity, policy and supply-chain risks to grow as deployments scale.

By Anthony Caruana • 5 min read • Fri, 1st May 2026
Proofpoint tracks cargo theft gang's post-breach tactics
Endpoint Protection

Proofpoint tracks cargo theft gang's post-breach tactics

Researchers say longer dwell time revealed how attackers scan freight, payments and banking systems to turn intrusions into cargo theft and fraud.

By Sean Mitchell • 3 min read • Tue, 21st Apr 2026
Attackers turn trusted tools into cyber weapon
Malware

Attackers turn trusted tools into cyber weapon

Trusted software and identity sessions are now prime attack paths, with ClickFix linked to more than 44% of defence evasion incidents.

By Shannon Williams • 4 min read • Fri, 3rd Apr 2026
AppViewX buys Eos to secure machine & AI agent identities
Software-as-a-Service

AppViewX buys Eos to secure machine & AI agent identities

AppViewX acquires AI identity start-up Eos and appoints its co-founder Archit Lohokare as Chief Executive, targeting non-human identity security.

By Sofiah Nichole Salivio • 4 min read • Fri, 20th Mar 2026
Fake Red Alert app used in Android spyware smishing
Endpoint Protection

Fake Red Alert app used in Android spyware smishing

Attackers push fake Red Alert Android app via SMS, turning Israel rocket warning tool into spyware that steals messages, contacts and location.

By Sean Mitchell • 4 min read • Fri, 13th Mar 2026
Mylobster.ai plans kernel-level AI assistant platform
Data governance

Mylobster.ai plans kernel-level AI assistant platform

Mylobster.ai unveils plan for kernel-level AI assistants across major platforms, targeting a USD $200 billion-plus systems-level market.

By Sean Mitchell • 4 min read • Wed, 18th Feb 2026

Stories from Other Regions

Code Signing stories