Attackers Use Malicious Terraform Providers to Deliver Go Malware via HashiCorp Registry

The feed reports widespread active exploitation and supply-chain abuse across infrastructure, developer ecosystems, enterprise software, browsers, operating systems, and AI tooling. Notable threats include unauthenticated remote code execution in F5 BIG-IP APM, Bifrost, Check Point, Next.js, WordPress, cPanel, and VeloCloud; RouterOS takeover chains; Chrome/Windows zero-day exploitation; Linux container and VM escapes; malicious Terraform, npm, PyPI, and Go packages; credential theft; phishing infrastructure; and malware campaigns. Multiple vulnerabilities are actively exploited or have public