Attackers Use Malicious Terraform Providers to Deliver Go Malware via HashiCorp Registry

thehackernews.com Sep 23, 2026

Attackers Use Malicious Terraform Providers to Deliver Go Malware via HashiCorp Registry

Curated by Shubham · TechCapsules · Sep 23, 2026

AI-summarised brief · reviewed before publication

Cybersecurity researchers uncovered Go-based malware distributed through two Go modules and two Terraform providers on HashiCorp’s registry, marking the first use of this centralized repository as a malicious delivery channel. The payload, linked to the Graphalgo campaign attributed to North Korean actors, employs dual command‑and‑control channels: a blockchain dead‑drop on the Arbitrum Sepolia testnet and a Slack bot. It gathers system data, generates an ephemerally‑shared key, and decrypts commands only when a specific cryptographic operation is performed. The attack mirrors recent malicious npm packages and demonstrates a sophisticated, targeted delivery mechanism.

💡 Why It Matters

· The incident exposes a new vector for supply‑chain attacks, leveraging widely used infrastructure to bypass traditional security checks.
· It underscores the growing sophistication of state‑backed threat actors in exploiting cloud‑native tools for covert, encrypted command execution.

Capsules Defense

Read full article on thehackernews.com

New Milestone in U.S. Effort to Dominate Space

On August 28 2026, President Donald Trump signed an executive order establishing the United States Space Academy at NASA’s Johnson Space Center, declaring outer space a critical domain for national security, economic growth, scientific discovery, and technological innovation. The order created a commission to advise the president on the academy, a NASA‑led federal institution combining rigorous technical education with leadership development and public service. The move follows a long line of U.S. space strategy documents and is welcomed by the military as a step toward asserting American dominance in space.

💡 The academy will produce a new cadre of leaders trained to secure U.S. interests in space, reinforcing the nation’s strategic edge amid growing commercial and geopolitical competition.

spacenews.com · Sep 24

Moog Completes ISO Class 8 Clean Room at Niagara Falls Facility to…

Moog Inc. has finished and commissioned an ISO Class 8 clean room at its Niagara Falls, New York, facility, boosting dedicated clean‑room capacity by more than 80 percent. The new space is engineered for continuous, multi‑shift assembly, integration and hot‑fire testing of thrusters and propulsion systems, allowing the company to shorten lead times and meet evolving mission demands. The expansion supports Moog’s growing defense and commercial spaceflight portfolio, including missile‑defense, space‑based interceptor and “Golden Dome” programs, and aligns with its vertically integrated propulsion operations that feature four high‑altitude hot‑fire test chambers. Dozens of new engineering and operations roles have been added, reinforcing Moog’s 75‑year legacy of precision propulsion hardware for satellites, lunar landers and defense applications.

💡 The clean‑room upgrade gives Moog the production agility needed to supply high‑volume, mission‑critical thrusters on tighter schedules, directly enhancing U.S. defense readiness and commercial space launch capabilities.

quantumcomputingreport.com · Sep 23

Babcock and Arqit Demonstrate Quantum-Safe Tactical Communications at DVD 2026

At the DVD 2026 defense exposition in Millbrook, UK, Babcock International Group and Arqit Quantum Inc. showcased a live tactical communications test. The demonstration used Arqit’s NetworkSecure software to encrypt data from a single site and transmit it over a mix of 4G/5G, Wi‑Fi, SATCOM, and MANET links to Babcock’s Ground Deployed Advanced Mortar System. The software‑defined, quantum‑safe encryption was integrated into Babcock’s Advanced Layered System Architecture, eliminating the need for physical inline hardware while maintaining low latency across core‑to‑edge networks.

💡 The trial proves that post‑quantum encryption can be deployed in real‑time, multi‑bearer military networks without hardware upgrades, offering a scalable, low‑latency security solution for future battlefield communications.

independent.co.ug · Sep 23

AAD 2026 concludes in South Africa, highlighting aerospace, defence cooperation

The 13th Africa Aerospace and Defence (AAD) exhibition closed on Sunday in Pretoria after a five‑day program at Air Force Base Waterkloof. Held under the theme “Africa’s Gateway to Defence and Aerospace Collaboration,” it featured more than 250 exhibitors from Africa, Asia, Europe and the Americas. Defence Minister Angie Motshekga said the event served as a forum for idea exchange, strategic partnership building and new opportunities. Armaments Corp. executive Segomotso Tire highlighted prospects for African firms in aerial vehicles, augmented‑reality systems and cybersecurity, noting that international ties can bring advanced technology and specialised skills. The biennial expo combined three trade days with a weekend public air show, reinforcing the continent’s significant push for regional industrial development and global future cooperation.

💡 By linking African manufacturers with global tech leaders, the expo accelerates the continent’s capacity to produce cutting‑edge defence systems domestically.

thequantuminsider.com · Sep 23

Babcock and Arqit Demonstrate Quantum-Safe Encryption for Defence Communications

Babcock International and Arqit Quantum demonstrated a quantum‑safe data link at Defence Vehicle Dynamics (DVD) 2026. Scenario data collected at Millbrook was encrypted with Arqit’s software and transmitted to Babcock’s Ground Deployed Advanced Mortar System (GDAMS) at a second site without any physical inline encryptors. The test used a layered encryption network that can operate over 4G/5G, Wi‑Fi, satcom and legacy tactical radios, showing end‑to‑end protection for headquarters‑to‑platform communications in contested environments. The exercise follows a newly signed memorandum of understanding that outlines joint work on secure networking, systems integration, digital engineering and cryptographic solutions. Both firms highlighted the ability to keep battlefield intelligence safe from emerging quantum‑computing threats. The demonstration proved real‑time latency under 200 ms, meeting operational tempo requirements.

💡 By proving quantum‑safe links without hardware encryptors, forces can field lighter, faster fire‑control units that stay ahead of tomorrow’s decryption tools.

quantumcomputingreport.com · Sep 22

Phasecraft Establishes U.S. Headquarters in Arlington, Virginia to Accelerate Government and Defense…

Phasecraft, a quantum‑software firm, announced the opening of its United States headquarters in the Ballston district of Arlington, Virginia. The move is backed by the Virginia Economic Development Partnership and state funding through the Virginia Jobs Investment Program, which will support workforce expansion. The Arlington base places the company within Washington, D.C. metro area, giving it access to federal defense, energy and commercial customers. Phasecraft’s U.S. activities already include participation in DARPA’s Quantum Benchmarking Initiative, where it validates fault‑tolerant algorithms, and a contract with ARPA‑E to develop quantum chemistry codes for catalytic material simulations. The new hub is intended to scale algorithm development, deepen cross‑stack integration with government agencies, and accelerate deployment of strategic hardware‑efficient software for fault‑tolerant quantum processors.

💡 By situating its HQ next to key defense and energy agencies, Phasecraft can turn federal research contracts into rapid product rollouts, giving the U.S. a home‑grown source of fault‑tolerant quantum software as hardware matures.