GitHub code-signing certificates stolen (but will be revoked this week)

By Paul Ducklin — January 31^st 2023 at 11:35

There was a breach, so the bad news isn't great, but the good news isn't too bad...

Patch Tuesday: 0-days, RCE bugs, and a curious tale of signed malware

By Paul Ducklin — December 14^th 2022 at 01:13

Tales of derring-do in the cyberunderground! (And some zero-days.)

By Paul Ducklin — April 20^th 2022 at 16:43

Either know the private key and use it scrupulously in your digital signature calculation.... or just send a bunch of zeros instead.