Inside the Modern SOC: The Identity Front Door The Identity Gap: Why Trust Has Become the New Attack SurfaceIn The 72-Minute Race... 2026-8-7 23:0:1 | 阅读: 10 | 收藏 | Unit 42 - unit42.paloaltonetworks.com attackers security attacker correlation

ChainDrop: Inside a Self-Propagating npm Worm Executive SummaryA self-propagating npm worm nicknamed ChainDrop infected over 400... 2026-8-6 22:26:39 | 阅读: 14 | 收藏 | Unit 42 - unit42.paloaltonetworks.com worm github cloud c2 chaindrop

Token Jacking: Cybercriminals Could Be Stealing Your AI Resources Executive SummaryIt’s three a.m., do you know what your AI agent is doing? Unit 42... 2026-8-6 10:0:49 | 阅读: 15 | 收藏 | Unit 42 - unit42.paloaltonetworks.com malicious security stations jacking cloud

The Frontier AI Vulnerability Burst: Industrializing Autonomous Zero-Day Discovery in Open-Source Software Executive SummaryFrontier AI is fundamentally shifting the dynamics of cybersecuri... 2026-8-4 13:0:11 | 阅读: 27 | 收藏 | Unit 42 - unit42.paloaltonetworks.com software frontier autonomous network

Almost Half of Malware Samples Communicate Direct to IP Executive SummaryMalware samples often bypass DNS entirely, communicating directly... 2026-8-4 12:50:53 | 阅读: 29 | 收藏 | Unit 42 - unit42.paloaltonetworks.com zt d2ip c2 network security

Pass the Passkey: A Novel Attack Surface in Passwordless Authentication Executive SummaryThis article analyzes new attack classes against passwordless aut... 2026-8-3 10:0:35 | 阅读: 28 | 收藏 | Unit 42 - unit42.paloaltonetworks.com attacker passkey cloud

The Xcode Assassin Returns: A Deep Dive Into the Latest XCSSET Version Executive SummaryAfter months of dormancy, the attackers behind the XCSSET malware... 2026-7-31 10:0:18 | 阅读: 22 | 收藏 | Unit 42 - unit42.paloaltonetworks.com xcsset v40 chrome c2 remote

Chinese-Speaking Threat Actor Harnesses AI Models for Autonomous Cyberattacks Executive SummaryUnit 42 identified an AI-enabled autonomous hacking campaign carr... 2026-7-30 10:0:52 | 阅读: 29 | 收藏 | Unit 42 - unit42.paloaltonetworks.com autonomous 2026 deepseek n8n hermes

Russian Global Webmail Espionage Executive SummaryUnit 42 has observed a persistent cyberespionage campaign we trac... 2026-7-23 14:10:53 | 阅读: 18 | 收藏 | Unit 42 - unit42.paloaltonetworks.com zimbra 1114 sta security webmail

Three Steps to the Terminal: A Siemens ROX II Zero-Day Trilogy Executive SummaryWe conducted this research in close partnership with Siemens, ref... 2026-7-17 10:0:24 | 阅读: 28 | 收藏 | Unit 42 - unit42.paloaltonetworks.com attacker siemens security malicious xz

AI, Automation and Attacks: Unpacking the Unit 42 2026 Global Incident Response Report Unit 42’s 2026 Global Incident Response Report offers frontline intelligence drawn... 2026-7-16 23:0:59 | 阅读: 12 | 收藏 | Unit 42 - unit42.paloaltonetworks.com richard defenders attackers andy

AI, Automation and Attacks: Unpacking the Unit 42 2026 Global Incident Response Report Unit 42’s 2026 Global Incident Response Report offers frontline intelligence drawn... 2026-7-16 23:0:59 | 阅读: 21 | 收藏 | Unit 42 - unit42.paloaltonetworks.com defenders richard andy attackers

TuxBot v3: Inside an IoT Botnet Framework With LLM-Assisted Development Executive SummaryWe identified a previously undocumented modular internet-of-thing... 2026-7-15 10:0:54 | 阅读: 38 | 收藏 | Unit 42 - unit42.paloaltonetworks.com tuxbot c2 llm developer statically

No Manners Here: The Ruthless Rise of The Gentlemen Ransomware Executive SummaryThe Gentlemen (aka Storm-2697) is a Ransomware-as-a-Service (RaaS... 2026-7-10 22:0:39 | 阅读: 35 | 收藏 | Unit 42 - unit42.paloaltonetworks.com gentlemen claimed 2026 security ransomware

Vidar Stealer Unmasked: Code Signing Abuse, Go Loaders and File Inflation Executive SummaryIn April 2026, Unit 42 researchers identified a financially motiv... 2026-7-7 22:0:21 | 阅读: 27 | 收藏 | Unit 42 - unit42.paloaltonetworks.com vidar stealer xmrig loader windows

How We Added WebAuthn to a Browser-Based RDP Client The PitchTL;DR: We built the first RDP client outside of Windows to support WebAut... 2026-7-2 22:0:39 | 阅读: 38 | 收藏 | Unit 42 - unit42.paloaltonetworks.com windows webauthn microsoft

Phantom Squatting: AI-Hallucinated Domains as a Software Supply Chain Vector Executive SummaryUnit 42 researchers found that large language models (LLMs) consi... 2026-7-1 01:0:11 | 阅读: 54 | 收藏 | Unit 42 - unit42.paloaltonetworks.com phantom llm malicious squatting

CL-STA-1062 Targets Southeast Asian Governments and Critical Infrastructure Executive SummaryThroughout 2025, we observed a cluster of activity targeting gove... 2026-6-25 22:0:52 | 阅读: 30 | 收藏 | Unit 42 - unit42.paloaltonetworks.com attackers tinyrct sta c2 1062

OpenClaw’s Skill Marketplace and the Emerging AI Supply Chain Threat Executive SummaryOpenClaw is an AI agent that executes third-party skills from Cla... 2026-6-23 22:0:51 | 阅读: 40 | 收藏 | Unit 42 - unit42.paloaltonetworks.com skill malicious security clawhub agentic

The Global Namespace Risk: Universal Bucket Hijacking Technique for Cloud Data Exfiltration Executive SummaryWe recently identified a bucket hijacking technique impacting mul... 2026-6-22 22:0:4 | 阅读: 35 | 收藏 | Unit 42 - unit42.paloaltonetworks.com cloud attacker hijacking security buckets