GoldenEyeDog Group Linked to DigiCert Breach, Certificate Theft
A threat actor subgroup known as GoldenEyeDog has been tied to a security breach at certificate authority DigiCert, involving the theft of code-signing certificates. The stolen certificates could be used to sign malicious software, potentially bypassing security checks and undermining trust in digitally signed code. This incident highlights ongoing risks to the software supply chain and digital trust infrastructure.