GoldenEyeDog’s CylindricalCanine Subgroup Stole DigiCert Code‑Signing Certificates
In April 2026, a sub‑group of the Chinese APT GoldenEyeDog, dubbed CylindricalCanine, hijacked a support analyst’s workstation at DigiCert. The actors exfiltrated code‑signing certificates meant for DigiCert customers and reused them to sign malware, bypassing detection. The breach highlights the supply‑chain risk of compromised certificate authorities.