> TritonInfoSec News
Home / Jul 18, 2026 / Story
0
#8 The Hacker News general July 17, 2026 at 16:39 UTC

GoldenEyeDog Subgroup Linked to DigiCert Breach and Code-Signing Certificate Theft

By [email protected] (The Hacker News)

AI Summary

Expel researchers attributed the April 2026 DigiCert breach — involving theft of code-signing certificates — to a subgroup called CylindricalCanine, linked to the Chinese cybercrime cluster GoldenEyeDog (also known as APT-Q-27, Dragon Breath, and Miuuti Group). Stolen DigiCert code-signing certificates are highly weaponizable for supply chain attacks, as they can be used to sign malware that bypasses endpoint security controls.

Read full article → https://thehackernews.com/2026/07/goldeneyedog-sub…

Relevance score: 84.0/100

# More from July 18

  1. 1
    CISA Adds Exploited SharePoint RCE Zero-Day CVE-2026-58644 to KEV The Hacker News
  2. 2
    New wp2shell WordPress Core Flaw Lets Unauthenticated Attackers Run Code The Hacker News
  3. 3
    Inc Ransomware Exploits SonicWall SMA Zero-Days Dark Reading
  4. 4
    OpenSSL HollowByte Flaw Could Freeze Server Memory with 11-Byte TLS Requests The Hacker News
  5. 5
    Two Scattered Spider Hackers Get 5.5 Years Each for £29 Million TfL Hack The Hacker News
  6. 6
    Coca-Cola Suspends US Fairlife Production Due to Ransomware Attack SecurityWeek
  7. 7
    CISA urges immediate action on actively exploited Fortinet flaws BleepingComputer
  8. 9
    New Windows LegacyHive zero-day gives hackers admin privileges BleepingComputer
  9. 10
    Now, even Russia's most elite hackers are using Clickfix to infect devices Ars Technica Security