GoldenEyeDog Subgroup Linked to DigiCert Breach and Code-Signing Certificate Theft
The April 2026 DigiCert security incident has been attributed to ‘CylindricalCanine,’ a subgroup of the Chinese cybercrime group GoldenEyeDog (also known as APT-Q-27, Dragon Breath, and Miuuti Group). This group is known for targeting the gambling and gaming sectors. The breach involved the theft of code-signing certificates, which could have significant implications for software supply chain security.