Daily Writeups

🔖New Writeup❗️
———————————————
🗓Date: Mon, 25 Dec 2023 21:05:00 GMT
———————————————
✏️Title: Enhancing Web Browser Security: Implementing Script Signing and the Chain of Trust Mode
———————————————
📎Link: https://medium.com/p/7016d0ae32f2
———————————————
Tags: #chain_of_trust #cybersecurity #code_signing #browser_security

Medium

Enhancing Web Browser Security: Implementing Script Signing and the Chain of Trust Mode

A Deep Dive into Script Signing and Trust Chain Integration.

9 viewsDaily Writeups, 22:14

Daily Writeups

Medium

Enhancing Web Browser Security: Implementing Script Signing and the Chain of Trust Mode

A Deep Dive into Script Signing and Trust Chain Integration.

5 viewsDaily Writeups, 23:19

Daily Writeups

Medium

Enhancing Web Browser Security: Implementing Script Signing and the Chain of Trust Mode

A Deep Dive into Script Signing and Trust Chain Integration.

6 viewsDaily Writeups, 00:22

Daily Writeups

⤷ Title: How You Can Apply a Digital Signature to an Excel Macro Project
════════════════════════
𐀪 Author: SignMyCode
════════════════════════
ⴵ Time: Mon, 30 Jun 2025 06:39:14 GMT
════════════════════════
⌗ Tags: #digital_signage #code_signing_certificate #cybersecurity #excel_macro #tutorial

Medium

How You Can Apply a Digital Signature to an Excel Macro Project

Meaning of Digital Signing

27 views07:05

Daily Writeups

⤷ Title: New macOS Infostealer Slips Past Apple’s Defenses with Code Signing and Notarization
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 18 Jul 2025 00:18:52 +0000
════════════════════════
⌗ Tags: #Malware #Apple Notarization #Code Signing #cybersecurity #Google Meet #Infostealer #Jamf Threat Labs #Ledger Live #macOS #Odyssey Stealer

Daily CyberSecurity

New macOS Infostealer Slips Past Apple’s Defenses with Code Signing and Notarization

Jamf Threat Labs has uncovered a sophisticated new macOS infostealer variant that managed to bypass Apple’s security defenses by leveraging valid code signing and notarization

6 views15:05

Daily Writeups

⤷ Title: Unveiling BaoLoader: How One Malware Family Abuses Trust for 7 Years
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 15 Sep 2025 00:30:09 +0000
════════════════════════
⌗ Tags: #Cybercriminals #BaoLoader #Code Signing #Cybercrime #cybersecurity #Expel #Fraud #Hacking #malware #security

Daily CyberSecurity

Unveiling BaoLoader: How One Malware Family Abuses Trust for 7 Years

Researchers expose BaoLoader, a malware operation that has systematically used at least 26 code-signing certificates over seven years to appear legitimate and bypass security.

6 views02:04

Daily Writeups

⤷ Title: Rhysida Ransomware Abuses Microsoft Trusted Signing to Deploy OysterLoader Via Teams Malvertising
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 04 Nov 2025 00:05:13 +0000
════════════════════════
⌗ Tags: #Malware #Bing Ads #Code Signing Abuse #initial access #Malvertising #OysterLoader #ransomware #Rhysida #Trusted Signing

Daily CyberSecurity

Rhysida Ransomware Abuses Microsoft Trusted Signing to Deploy OysterLoader Via Teams Malvertising

Rhysida ransomware is abusing Microsoft Trusted Signing to deploy OysterLoader (IAT) via Bing/Teams malvertising. The gang leveraged 40+ certificates to sign malware, bypassing security filters.

14 views02:04

Daily Writeups

⤷ Title: TamperedChef Malvertising Uses US Shell Companies to Sign Trojanized Apps with Valid Certificates, Deploying Stealth Backdoor
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 24 Nov 2025 00:42:28 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Acronis #Code_Signing Certificate #JavaScript Backdoor #Malvertising #Scheduled Task #SEO Poisoning #Signed Trojan #TamperedChef

Daily CyberSecurity

TamperedChef Malvertising Uses US Shell Companies to Sign Trojanized Apps with Valid Certificates, Deploying Stealth Backdoor

Acronis exposed TamperedChef, a global campaign using US shell companies to sign trojanized apps. The malware deploys a stealthy, obfuscated JavaScript backdoor via a scheduled task for long-term persistence.

80 views02:04

Daily Writeups

⤷ Title: The Notarized Nightmare: New MacSync Stealer Bypasses Gatekeeper to Hijack Mac Devices
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 24 Dec 2025 00:28:59 +0000
════════════════════════
⌗ Tags: #Malware #Apple Notarization #Code Signing #Cyber Security #Gatekeeper Bypass #Infostealer #Jamf Threat Labs #macOS Malware #MacSync Stealer #swift #ZK_Call Messenger

Daily CyberSecurity

The Notarized Nightmare: New MacSync Stealer Bypasses Gatekeeper to Hijack Mac Devices

The cat-and-mouse game between Apple’s security protocols and malware authors has taken a stealthy turn. A new report from Jamf Threat Labs reveals that the increasingly active MacSync Steal…

9 views04:04

Daily Writeups

⤷ Title: Shadows Vanish: The “Global Man” Exit Scam Leaves Malware Operators in the Dark
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 06 Feb 2026 02:34:11 +0000
════════════════════════
⌗ Tags: #Cybercriminals #code_signing certificates #cybercrime forums #digital certificates #EV Certificates #Exit Scam #Global Man #kernel_mode drivers #malware obfuscation #security breach 2026 #Shadow Economy #threat intelligence

Penetration Testing Tools

Shadows Vanish: The "Global Man" Exit Scam Leaves Malware Operators in the Dark

In the clandestine digital underworld, a prominent purveyor of code-signing certificates has executed a high-profile disappearance. The Global

18 views04:04

Daily Writeups

⤷ Title: Microsoft’s Automated Suspensions Almost Silenced VeraCrypt and WireGuard
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 03:45:23 +0000
════════════════════════
⌗ Tags: #Technology #Code Signing #Developer Support #Driver Signing #Microsoft #open_source #Scott Hanselman #security vulnerability #VeraCrypt #Windows 11 #WireGuard

Daily CyberSecurity

Microsoft’s Automated Suspensions Almost Silenced VeraCrypt and WireGuard

Microsoft’s sudden suspension of VeraCrypt and WireGuard accounts reveals the dangers of automated bureaucracy in the critical path of security software.

27 views05:03

Daily Writeups

⤷ Title: Microsoft Ban Leaves VeraCrypt Unable to Sign Critical Windows Drivers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 03:00:45 +0000
════════════════════════
⌗ Tags: #Technology #Bootloader #Code Signing #Driver Signature Enforcement #encryption #Microsoft #Mounir Idrassi #open_source #Tech News 2026 #UEFI #VeraCrypt #Windows 11

Daily CyberSecurity

Microsoft Ban Leaves VeraCrypt Unable to Sign Critical Windows Drivers

Microsoft has suspended VeraCrypt’s developer account, blocking critical driver signatures. Without a fix, future Windows updates and system boots are at risk.

23 views05:04

Daily Writeups

⤷ Title: The Support Chat Trap: How a “Customer Screenshot” Led to a Critical Code-Signing Breach at DigiCert
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 05 May 2026 07:36:49 +0000
════════════════════════
⌗ Tags: #Malware #Certificate Revocation #Code Signing #Cyber Security 2026 #DigiCert #endpoint security #malware #security breach #Social Engineering #Support Portal Exploit #Zhong Stealer

Penetration Testing Tools

The Support Chat Trap: How a "Customer Screenshot" Led to a Critical Code-Signing Breach at DigiCert

A seemingly innocuous file transmitted via a support chat escalated into a significant crisis for DigiCert. An adversary

12 views09:04

Daily Writeups

⤷ Title: “Lorem Ipsum” Loader Weaponizing Microsoft Teams via SEO Poisoning
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 12 May 2026 07:12:47 +0000
════════════════════════
⌗ Tags: #Malware #BlueVoyant #Code Signing #Cyber Security #DLL Sideloading #infosec #initial access broker #JFIF C2 #Lorem Ipsum Malware #Microsoft Teams #SEO Poisoning #Threat Intel

Daily CyberSecurity

"Lorem Ipsum" Loader Weaponizing Microsoft Teams via SEO Poisoning

BlueVoyant unmasks "Lorem Ipsum": a well-funded campaign using SEO poisoning and signed MS Teams installers to deploy stealthy backdoors via image files.

13 views09:04

About

Blog

Apps

Platform