Codesigning certificate revokation can be a major hurdle (medium.com)

Curious as to whether Globalsign verified the tip-off (but didn’t notice the source was outdated) or didn’t verify them at all.

The former is a nightmare to deal with but the latter might open this up to be used maliciously against any Globalsign customer