Security Firm Bit9 Hacked, Used to Spread Malware
Summary: Bit9, a provider of application whitelisting software to the U.S. government and at least 30 Fortune 100 firms, disclosed that attackers breached its corporate network and stole a digital code-signing certificate, which was then used to sign malware sent to at least three customers. Bit9 said the compromised systems were among a handful of computers where the company had failed to install its own product, and that its investigation showed the product itself was not compromised.
What's compelling: Bit9 is a default trusted publisher in its own agent, so any machine running a whitelist policy will blindly trust and run anything signed with its stolen certificate - and the intrusion echoes RSA's 2011 breach, where attackers went through a security vendor to reach the defense contractors it protected.
Read the original at Krebs on Security ↗
- Topics
- Endpoint & Network Security
- Related
- Adapting to AI penetration testing orchestrators: The Modern Security Model Cyber Risks · Nov 13, 2026Introducing Spend Management: Spending limits and alerts for Cloudflare Cyber Risks · Nov 13, 2026Choosing Que Paxa, an unusual consensus algorithm Cyber Risks · Nov 11, 2026