Cuba ransomware group used Microsoft developer accounts to sign malicious drivers
The ransomware gang was able to use signed malicious drivers to disable endpoint security tools. Microsoft has revoked the certificates.
Microsoft Partner Center Windows Hardware Developer Program Windows Vista Windows Hardware Developer Windows Update Windows Defender Application Control
Source: csoonline.com