News for hackers. Stuff that matters.
Re:Hackers exploited Windows 0-day for 6 months after Micros... by tamimio on Tuesday March 05, 2024 @08:21PM (#39611183)
> To work with supported versions of Windows, third-party drivers must first be digitally signed by Microsoft to certify that they are trustworthy and meet security requirements.

That’s a very bold statement when you can replicate a signature, so now the malware is “trustworthy” https://github.com/secretsquirrel/SigThief

Re:Hackers exploited Windows 0-day for 6 months after Micros... by Arnavion on Wednesday March 06, 2024 @12:52AM (#39612754)
Your link is about AVs implementing signature verification of binaries incorrectly, not Windows implementing signature verification of drivers incorrectly.