code-signing

FIRST·30 min

• FIRST
• Social Engineering
• Date: 2025
• Location: First

Presenters detail vulnerability discovery and exploitation in Malicious Code-signing at Scale: How Attackers Impersonate Thousands of Real Businesses.

Security BSides San Francisco·23 min

• BSides
• Blue Team
• Date: 2025
• Location: Bsides

Evaluates BSidesSF 2023 - HSMs in Plain Envelopes: A Code Signing Story (Alexis Hancock) and evaluates key implications for security practitioners.

Virus Bulletin·26 min

• VIRUS BULLETIN
• Malware
• Date: 2024
• Location: Virus Bulletin

Yuta Sawabe · Rintaro Koike (NTT Security Holdings)

Demonstrates P-wave of malicious code signing and evaluates key implications for security practitioners.

Car Hacking Village·35 min

• DEF CON
• AppSec
• Date: Aug 2023
• Location: Las Vegas

Bill Demirkapi

Bill Demirkapi uncovers systemic validation flaws in digital signature implementations, allowing attackers to repurpose incompatible certificates to sign untrusted code.

x33fcon·41 min

• X33FCON
• Blue Team
• Date: 2022
• Location: X33Fcon

Discusses 14. The Code Signing Certificate You Never Knew You Had by Dima van de Wouw and evaluates key implications for security practitioners.

Main Stage·22 min

• DEF CON
• Malware
• Date: Aug 2019
• Location: Las Vegas

Andy Grant

Dissects macOS PKG installer internals to reveal how malware authors abuse the package format for persistence and privilege escalation.

Main Stage·49 min

• DEF CON
• Malware
• Date: Aug 2019
• Location: Las Vegas

Patrick Wardle

Demonstrates how macOS malware authors abuse legitimate Apple APIs and signing to create persistent, undetected implants.