Bit9 announced today that they were breached and that their own product was used to distribute malware to their customers.  The hackers were able to gain access to Bit9's digital code-signing certificates which they then used to distribute illegitimately signed malware to Bit9 customers.  Bit9 claims that they were breached because there were a few systems on their own network not using their own software.

 

Bit9's official post: https://blog.bit9.com/2013/02/08/bit9-and-our-customers-security/