Curated Cyber Threat Intelligence
Threat Feed
Daily intelligence on vulnerabilities, threat actors and geopolitical context — distilled from primary sources.
scheduleUpdated 2026-10-28 · 04:17 UTC
articleTotal: 1890 reports
Filtered Reports
2 / 5 results
highbug_reportVulnerabilitybug_reportVulnerability
Go 1.27.3 and 1.26.10 block eight eMudhra CA keys over undisclosed risk
Go versions 1.27.3 and 1.26.10 (released October 20, 2026). All Go programs must be rebuilt with these versions to enforce the block. Eight intermediate CA keys from eMudhra (six TLS, two code-signing) under emSign Root TLS CA - G3 and emSign Root CS…
Go20 Oct · 09:32 UTC
highbug_reportVulnerabilitybug_reportVulnerability
Hijacked npm and Go packages deploy cross-platform stealer via VS Code
Compromised npm and Go packages targeting developers using Microsoft Visual Studio Code on Windows, Linux, and macOS. Attack bypasses npm v12 lifecycle script protections by abusing VS Code task execution.
npm29 Jun · 03:36 UTC