Attackers Use Malicious Terraform Providers to Deliver Go Malware via HashiCorp Registry

The document is a cybersecurity news feed reporting multiple high-impact vulnerabilities, active exploitation campaigns, supply-chain attacks, malicious packages, credential theft, zero-day exploitation, and AI-related security risks. Notable items include unauthenticated remote code execution in F5 BIG-IP APM, Bifrost, Check Point Security Management Server, Next.js, WordPress, and cPanel; router and virtualization escapes; Chrome/Windows zero-day exploitation; compromised npm, PyPI, Go Module, and Terraform packages; and phishing and credential-stealing services.