I don't see enough info in the article to conclude what happened. But I have a hypothesis. I bet they use certificate pinning. Process A launches process B an

I don't see enough info in the article to conclude what happened. But I have a hypothesis. I bet they use certificate pinning. Process A launches process B and checks against a pinned certificate. This is even more secure than just using the windows code signing stuff. Problem is, when their cert expired, they were supposed to renew the same cert. Instead, somebody got a new one and signed the build of process B. The device automatically downloads process B, but then the certificate pin check fails when it tries to launch it. All the security guides that tell you to do certificate pinning need flashing neon signs explaining this problem. You can't pin certs if you intend to ever change certs.