China-based threat actor Storm-0558 breaches Microsoft’s consumer signing system, obtaining a sensitive cryptographic key and using it to conduct surveillance on the US State and Commerce Departments and other government agencies.
View full story…