Microsoft is updating Windows code signing with new certificates, stronger algorithms, and post-quantum cryptography planned for 2027.

Microsoft’s code-signing certificates also have an expiration date. Microsoft wants to bring the infrastructure up to date.

GitHub says unknown attackers have stolen encrypted code-signing certificates for its Desktop and Atom applications after gaining access to some of its development and release planning repositories.

Microsoft says it has disrupted a malware-signing-as-a-service (MSaaS) operation that abused the company's Artifact Signing service to generate fraudulent code-signing certificates used by ransomware ...