We don't have a scalable way to prevent counterfeit software certificates from being used to make malicious programs appear trustworthy.
open
Global / Unspecified, Global
WS00837
Attackers can sometimes obtain or forge digital certificates that make malicious software appear legitimately signed and safe to install. Strengthening the verification processes behind these certificates remains an unresolved security challenge.