Bling Libra’s Tactical Evolution: The Threat Actor Group Behind ShinyHunters Ransomware Executive SummaryIn an incident response engagement handled by Unit 42, the threat... 2024-8-23 18:0:21 | 阅读: 54 | 收藏 | Unit 42 - unit42.paloaltonetworks.com cloud buckets winscp cloudtrail security

Autoencoder Is All You Need: Profiling and Detecting Malicious DNS Traffic Executive SummaryTo improve our detection of suspicious network activity, we lever... 2024-8-21 18:0:1 | 阅读: 64 | 收藏 | Unit 42 - unit42.paloaltonetworks.com malicious network ddns c2 autoencoder

Leaked Environment Variables Allow Large-Scale Extortion Operation of Cloud Environments Unit 42 researchers found an extortion campaign's cloud operation that successfull... 2024-8-15 18:0:9 | 阅读: 66 | 收藏 | Unit 42 - unit42.paloaltonetworks.com cloud malicious security attackers victim

Unit 42 Attack Surface Threat Research: Over 23% of Internet-Connected Exposures Involve Critical IT and Security Infrastructure IntroductionOur latest Unit 42 Attack Surface Threat Report explores the attack su... 2024-8-14 21:0:37 | 阅读: 46 | 收藏 | Unit 42 - unit42.paloaltonetworks.com industries security palo exposures

ArtiPACKED: Hacking Giants Through a Race Condition in GitHub Actions Artifacts Executive SummaryThis research reviews an attack vector allowing the compromise of... 2024-8-13 18:0:36 | 阅读: 48 | 收藏 | Unit 42 - unit42.paloaltonetworks.com github artifacts artifact repository malicious

Harnessing LLMs for Automating BOLA Detection Executive SummaryThis post presents our research on a methodology we call BOLABust... 2024-8-13 04:0:54 | 阅读: 97 | 收藏 | Unit 42 - unit42.paloaltonetworks.com bola bolabuster pve bolas

Fighting Ursa Luring Targets With Car for Sale This post is also available in: 日本語 (Japanese)Executive SummaryA Russian thre... 2024-8-2 18:0:45 | 阅读: 37 | 收藏 | Unit 42 - unit42.paloaltonetworks.com ursa fighting webhook sale malicious

Identifying a BOLA Vulnerability in Harbor, a Cloud-Native Container Registry Executive SummaryIn a recent audit of open-source web applications, threat researc... 2024-8-1 03:0:54 | 阅读: 57 | 收藏 | Unit 42 - unit42.paloaltonetworks.com harbor bola maintainer

Scam Attacks Taking Advantage of the Popularity of the Generative AI Wave This post is also available in: 日本語 (Japanese)Executive SummaryIn this post,... 2024-7-26 18:0:11 | 阅读: 55 | 收藏 | Unit 42 - unit42.paloaltonetworks.com genai chatgpt gemini network gpt

AI Tool Identifies BOLA Vulnerabilities in Easy!Appointments This post is also available in: 日本語 (Japanese)Executive SummaryPalo Alto Netw... 2024-7-25 18:0:55 | 阅读: 94 | 收藏 | Unit 42 - unit42.paloaltonetworks.com bola privileged appointment

Accelerating Analysis When It Matters Executive SummaryIn this post, we share information about how security professiona... 2024-7-24 18:0:0 | 阅读: 49 | 收藏 | Unit 42 - unit42.paloaltonetworks.com stealer analysis c2 pw mce

Vulnerabilities in LangChain Gen AI This post is also available in: 日本語 (Japanese)Executive SummaryResearchers fr... 2024-7-23 18:0:19 | 阅读: 110 | 收藏 | Unit 42 - unit42.paloaltonetworks.com langchain sitemap security python

From RA Group to RA World: Evolution of a Ransomware Group This post is also available in: 日本語 (Japanese)Executive SummaryThe ransomware... 2024-7-22 18:0:51 | 阅读: 192 | 收藏 | Unit 42 - unit42.paloaltonetworks.com ra ransomware cortex windows starlight

Container Breakouts: Escape Techniques in Cloud Environments This post is also available in: 日本語 (Japanese)Executive SummaryThis article r... 2024-7-18 18:0:41 | 阅读: 51 | 收藏 | Unit 42 - unit42.paloaltonetworks.com containers attacker kubernetes cortex privileges

Beware of BadPack: One Weird Trick Being Used Against Android Devices Executive SummaryThis article discusses recent samples of BadPack Android malware... 2024-7-16 18:0:48 | 阅读: 45 | 收藏 | Unit 42 - unit42.paloaltonetworks.com apk badpack analysis

DarkGate: Dancing the Samba With Alluring Excel Files Executive SummaryThis article reviews a DarkGate malware campaign from March-April... 2024-7-11 03:0:54 | 阅读: 47 | 收藏 | Unit 42 - unit42.paloaltonetworks.com darkgate xlsx analysis c2 powershell

Dissecting GootLoader With Node.js Executive SummaryThis article shows how to circumvent anti-analysis techniques fro... 2024-7-4 06:0:26 | 阅读: 68 | 收藏 | Unit 42 - unit42.paloaltonetworks.com gootloader malicious oftenfs course83 windows

Threat Brief: CVE-2024-6387 OpenSSH RegreSSHion Vulnerability Executive SummaryOn July 1, 2024, a critical signal handler race condition vulnera... 2024-7-3 02:28:47 | 阅读: 70 | 收藏 | Unit 42 - unit42.paloaltonetworks.com openssh 6387 cloud prisma cortex

The Contrastive Credibility Propagation Algorithm in Action: Improving ML-powered Data Loss Prevention Executive SummaryThe Contrastive Credibility Propagation (CCP) algorithm is a nove... 2024-6-28 18:0:57 | 阅读: 55 | 收藏 | Unit 42 - unit42.paloaltonetworks.com pseudo ccp unlabeled classifier dlp

Threat Actor Groups Tracked by Palo Alto Networks Unit 42 Executive SummaryThis article lists the threat actors tracked by Palo Alto Network... 2024-6-28 09:0:15 | 阅读: 54 | 收藏 | Unit 42 - unit42.paloaltonetworks.com scorpius sectors ransomware taurus retail