The hacker group that recently broke into systems belonging to graphics chip maker Nvidia has released two of the company’s old code-signing certificates. Researchers warn the drivers could be used to ...

The world is quickly moving toward a reality where almost everything is powered by software. This is the realization of the internet of things, which already includes cars, watches, medical devices, ...

There are lots of ways to ensure the success of an advanced hacking operation. For a gang called Suckfly, one of the keys is having plenty of stolen code-signing certificates on hand to give its ...

The Linux Foundation's sigstore code-signing software, developed with Google, Red Hat and Purdue University, will help prevent attacks on the software supply chain. The Linux Foundation has launched a ...

Researchers with Chronicle, the cybersecurity company and Alphabet subsidiary, today published an analysis of its investigation into the trend of signed malware being exploited in the wild. The ...

Sigstore is a new Linux Foundation project described as "Let's Encrypt for Code Signing". The tool is developed by Google, Red Hat, and Smallstep, and is designed to offer better provenance for code.

Cybercriminals are abusing Microsoft's Trusted Signing platform to code-sign malware executables with short-lived three-day certificates. Threat actors have long sought after code-signing certificates ...

A recent cyberattack has compromised a large amount of Nvidia’s data, including a pair of digital-signing certificates. Here’s what’s at stake and how to react. No company is safe from being targeted ...

AI success depends on whether enterprise data is ready, reachable, and close enough to the workloads that need it. In this eSpeaks episode, Dell Technologies’ Vrashank Jain explains why fragmented ...

GitHub has issued an urgent warning to users of its Desktop for Mac and Atom text editor applications after an unauthorised actor broke into its systems and stole two encrypted DigiCert code-signing ...

Private keys used to sign D-Link software were included in open-source firmware published by the company. A simple mistake by networking gear manufacturer D-Link could have opened the door for costly ...