AzureSignTool incorrectly identifies unsigned files as signed

Targeting the Extended Supply Chain – a Brief Review of Stuxnet

Cyber Attacks, Code Signing, and the Digital Supply Chain