From Exposure to Lockdown: How AWS Neutralizes Compromised IAM Credentials through Managed Policies Executive SummaryThis article explores how AWS mitigates the security risks associ... 2026-9-21 10:0:13 | 阅读: 20 | 收藏 | Unit 42 - unit42.paloaltonetworks.com github security cloud cloudtrail

A Vault with a Heap-View: The Uncomfortable Space Between AgentCore Harness and Identity Unit 42 researchers have identified an issue where using default configurations in... 2026-9-18 10:0:36 | 阅读: 27 | 收藏 | Unit 42 - unit42.paloaltonetworks.com harness agentcore mcp memory downstream

Inside the Modern SOC: Defending the Cross-Environment Pivot The Cross-Environment GapOur series, Inside the Modern SOC: Trends and Insights fr... 2026-9-17 22:0:33 | 阅读: 23 | 收藏 | Unit 42 - unit42.paloaltonetworks.com security correlation signals attacker detections

Atomic macOS (AMOS) Stealer Activity Executive SummaryThis article reviews an Atomic macOS (AMOS) stealer malware infec... 2026-9-16 10:0:6 | 阅读: 28 | 收藏 | Unit 42 - unit42.paloaltonetworks.com stealer amos zsh malicious stage

Unmasking Cloud Identities: From Behavioral Clustering to Automated Detection Executive SummaryAs cloud environments expand to include human, machine and autono... 2026-9-14 10:0:1 | 阅读: 24 | 收藏 | Unit 42 - unit42.paloaltonetworks.com cloud identities behavioral security clustering

The Machine With Many Faces: Post-Exploitation Identity Misuse in SPIFFE/SPIRE Executive SummaryThis research demonstrates post-exploitation techniques that coul... 2026-9-10 10:0:43 | 阅读: 26 | 收藏 | Unit 42 - unit42.paloaltonetworks.com workload spire spiffe attestation svid

Untracked Nightmares: The Threats Hiding Behind Commodity Infrastructure Executive SummaryA recent Unit 42 investigation into seemingly low-priority enterp... 2026-9-9 10:0:55 | 阅读: 37 | 收藏 | Unit 42 - unit42.paloaltonetworks.com gate landing cfd loader offerloader

Attackers Expose Ongoing AI Tool Use Targeting Organizations in Latin America Executive SummaryWe have analyzed two ongoing, multi-stage network intrusion and d... 2026-9-3 10:0:58 | 阅读: 34 | 收藏 | Unit 42 - unit42.paloaltonetworks.com attackers cri 2026 doxa duckdns

An AI-Assisted Cyber Attack: Inside a Unit 42 Investigation Unit 42 responded to an incident where a human attacker used frontier AI to breach... 2026-9-2 10:0:46 | 阅读: 41 | 收藏 | Unit 42 - unit42.paloaltonetworks.com agents attacker cloud aml frontier

Spring Ring: An Inside Look at Voice Phishing Campaigns in Microsoft Teams Executive SummaryBetween January and April 2026, we uncovered a coordinated social... 2026-8-31 10:0:36 | 阅读: 34 | 收藏 | Unit 42 - unit42.paloaltonetworks.com onmicrosoft attackers attacker microsoft vishing

Perturbation Probing: A New Diagnostic for the Fragility of LLM Safety Introducing a New Angle on LLM SafetyOur previous research on logit-gap steering d... 2026-8-28 22:0:7 | 阅读: 32 | 收藏 | Unit 42 - unit42.paloaltonetworks.com llm neurons aligned security probing

The State of AI-Enabled Malware August 2026: From Brand Abuse to Agentic Execution Executive SummaryTo assess the impact of AI-enabled malware, we collected and anal... 2026-8-25 10:0:57 | 阅读: 55 | 收藏 | Unit 42 - unit42.paloaltonetworks.com ransomware funksec threats cortex analysis

Connecting the Dots: Securing the Overlooked Corners of the Software Development Lifecycle (SDLC) Supply Chain While supply chain threats have been quietly compounding over the past decade, the... 2026-8-21 23:0:21 | 阅读: 38 | 收藏 | Unit 42 - unit42.paloaltonetworks.com developer cloud attackers pipelines software

Identity Abuse Through Trusted Communication Channels Executive SummaryIdentity has become a primary security boundary for most organiza... 2026-8-20 10:0:25 | 阅读: 48 | 收藏 | Unit 42 - unit42.paloaltonetworks.com security attackers phishing malicious

Kimwolf v7: An Evolution of the Kimwolf Botnet Content WarningWe are providing a content warning because the following article co... 2026-8-11 10:0:16 | 阅读: 44 | 收藏 | Unit 42 - unit42.paloaltonetworks.com kimwolf flood c2 apk proxy

The Permanent Threat: Analyzing Aeternum’s Blockchain-Based C2 Operations and Communications Executive SummaryAeternum is a recently discovered C++ botnet loader that shifts i... 2026-8-10 22:0:2 | 阅读: 45 | 收藏 | Unit 42 - unit42.paloaltonetworks.com polygon c2 aeternum hxxps blockchain

Inside the Modern SOC: The Identity Front Door The Identity Gap: Why Trust Has Become the New Attack SurfaceIn The 72-Minute Race... 2026-8-7 23:0:1 | 阅读: 42 | 收藏 | Unit 42 - unit42.paloaltonetworks.com attackers security attacker correlation

ChainDrop: Inside a Self-Propagating npm Worm Executive SummaryA self-propagating npm worm nicknamed ChainDrop infected over 400... 2026-8-6 22:26:39 | 阅读: 52 | 收藏 | Unit 42 - unit42.paloaltonetworks.com worm github cloud c2 chaindrop

Token Jacking: Cybercriminals Could Be Stealing Your AI Resources Executive SummaryIt’s three a.m., do you know what your AI agent is doing? Unit 42... 2026-8-6 10:0:49 | 阅读: 66 | 收藏 | Unit 42 - unit42.paloaltonetworks.com malicious security stations jacking cloud

The Frontier AI Vulnerability Burst: Industrializing Autonomous Zero-Day Discovery in Open-Source Software Executive SummaryFrontier AI is fundamentally shifting the dynamics of cybersecuri... 2026-8-4 13:0:11 | 阅读: 59 | 收藏 | Unit 42 - unit42.paloaltonetworks.com software frontier autonomous network