Security · 1h ago
DigiCert Breach Linked to Chinese Cybercrime Subgroup GoldenEyeDog
Researchers at Expel tied the April 2026 DigiCert security incident to CylindricalCanine, a subgroup of the Chinese cybercrime gang GoldenEyeDog. The group stole code-signing certificates, enabling malware to appear legitimate. GoldenEyeDog has historically targeted gambling and gaming sectors.
Meridian48 take
The breach underscores how certificate theft can undermine trust in software supply chains, but attribution details remain sparse and should be treated with caution.
Read the full reporting
GoldenEyeDog Subgroup Linked to DigiCert Breach and Code-Signing Certificate Theft →
The Hacker News
digicert-breachcode-signing-theft