Curated Cyber Threat Intelligence

Threat Feed

Daily intelligence on vulnerabilities, threat actors and geopolitical context — distilled from primary sources.

scheduleUpdated 2026-09-04 · 02:17 UTC
articleTotal: 1172 reports

Filtered Reports

2 / 2 results
Active filter:tag: #infrastructure-as-code✕ clear
Coder registry compromised via Cloudflare to deliver malicious Terraform moduleshighbug_reportVulnerability
bug_reportVulnerability

Coder registry compromised via Cloudflare to deliver malicious Terraform modules

Coder registry infrastructure (registry.coder.com) accessed via compromised Cloudflare configuration. Users who downloaded Terraform modules between 07:35 and 21:45 UTC on August 31, 2026 potentially affected.

Coder3 Sep · 18:04 UTC
Terraform MCP, Veeam VSPC, Django patch 11 flaws including CVSS 10.0 bugcriticalbug_reportVulnerability
bug_reportVulnerability

Terraform MCP, Veeam VSPC, Django patch 11 flaws including CVSS 10.0 bug

HashiCorp Terraform MCP Server versions 0.2.1–1.0.0 (Streamable HTTP mode only); Veeam Service Provider Console versions 9.2.1.33875 and earlier (all version 9 builds before 9.3); Django versions prior to 6.0.8 and 5.2.17 (GeoDjango spatial field con…

HashiCorp5 Aug · 12:27 UTC