VMware Carbon Black controversies

Bit9 software-signing key breach

Attackers compromised Bit9's network, copied a private certificate-signing key, and used it to sign malware. The incident was particularly serious because the stolen credential could make malicious software appear to have originated from a trusted security vendor.