Skip to content
Threat Feed
Subscribe

Tag

Golang

2 briefs RSS
high threat

Qilin Ransomware Claims New Victim in French Public Sector

The Qilin ransomware group has claimed a new victim, Commune d'Eyguires (www.eyguieres.org), a public sector entity in France, employing their Golang-based ransomware and double extortion tactics, leading to data encryption and potential public release of exfiltrated information.

Qilin +1 ransomware golang double-extortion public-sector france
3r 14t 16i
high advisory

Tilt: Unauthenticated pprof debug endpoints on the Tilt HUD server

An unauthenticated attacker can exploit CVE-2026-55882 in Tilt HUD server versions 0.19.5 through 0.37.3, when exposed on a non-loopback address, by accessing the `/debug/pprof` endpoints to read sensitive process memory, including session and API server tokens, and to degrade application performance through prolonged CPU profiling or tracing.

Tilt HUD server vulnerability rce data-exfiltration golang webserver
2r 3t