Sectigo is a technology platform tracked across 2 threat clusters and 2 intelligence report mentions on ThreatCluster. First observed May 29, 2026; most recent activity July 7, 2026.
A counterfeit RVTools installer is utilizing a legitimate Sectigo code-signing certificate to bypass Microsoft Defender SmartScreen and other endpoint protections. This malicious software deploys a multi-stage…
Researchers from Mozilla's 0DIN have demonstrated a new attack vector that allows AI coding agents, specifically Anthropic's Claude Code, to execute malicious payloads from seemingly benign GitHub repositories. The…