Signal 11 | CybersecuritySignal 11 | Cybersecurityhttps://signal11.io/If GitHub Can Be Compromised, So Can Youhttps://signal11.io/blog/2026-05-22-malicious-vscode-extension/https://signal11.io/blog/2026-05-22-malicious-vscode-extension/An experiment in running malware in developer tooling, finding gaps in visibility and security controls, and AI-powered tooling to address the issuesFri, 22 May 2026 00:00:00 GMTJake FlintThe Malware Was Already Therehttps://signal11.io/blog/2026-02-08-cache-smuggling-com-hijacking/https://signal11.io/blog/2026-02-08-cache-smuggling-com-hijacking/What if the malware was already on disk before the attack even started? We walk through a technique that abuses browser caching behaviour and Windows COM resolution order to achieve persistence in corporate environments.Sun, 08 Feb 2026 00:00:00 GMTJake Flint