Curated Cyber Threat Intelligence

Threat Feed

Daily intelligence on vulnerabilities, threat actors and geopolitical context — distilled from primary sources.

scheduleUpdated 2026-10-28 · 04:17 UTC
articleTotal: 1890 reports

Filtered Reports

2 / 2 results
Active filter:vendor: hashicorp✕ clear
Malicious Terraform providers on HashiCorp Registry deliver DPRK malwarehighbug_reportVulnerability
bug_reportVulnerability

Malicious Terraform providers on HashiCorp Registry deliver DPRK malware

HashiCorp Terraform Registry and Go module repositories. Specific malicious packages: gocommunity-io/dockerd (222 downloads), kreuzwenker/docker (1,449 downloads), gocommunity.io/orderedbtree, gogets.dev/btreex. Related npm packages also identified.

HashiCorp23 Sep · 16:06 UTC
Terraform MCP, Veeam VSPC, Django patch 11 flaws including CVSS 10.0 bugcriticalbug_reportVulnerability
bug_reportVulnerability

Terraform MCP, Veeam VSPC, Django patch 11 flaws including CVSS 10.0 bug

HashiCorp Terraform MCP Server versions 0.2.1–1.0.0 (Streamable HTTP mode only); Veeam Service Provider Console versions 9.2.1.33875 and earlier (all version 9 builds before 9.3); Django versions prior to 6.0.8 and 5.2.17 (GeoDjango spatial field con…

HashiCorp5 Aug · 12:27 UTC