If you're on a Mac and use any of these:
Google Santa
Facebook OSquery
Little Snitch
xFence
Yelp’s OSXCollector
Carbon Black’s Cb Response
Objective See’s tools

Then update your tools, a vulnerability has been discovered which allows malware to masquerade as valid Apple-signed code.

https://motherboard.vice.com/en_us/article/evkq3m/apple-macos-malware-okta-research

#CoSoSec